add forward parameter to baseclass, default DROP

ufw's /etc/default/ufw allows to tweak some parameters: among others is
the forward policy. it can useful to set that policy to something
other than DROP.
also: validate_re to catch easier errors earlier ;)