Move per-container forward rules to DOCKER chain

Docker-DCO-1.1-Signed-off-by: Ian B <porjo38@yahoo.com.au> (github:
porjo)