Make port forwarding for CF conditional. Extract offline iptables settings.

Signed-off-by: Nikhil Gajwani <ngajwani@pivotallabs.com>