-P FORWARD ACCEPT
-A FORWARD -j DOCKER-USER
-A FORWARD -m set --match-set docker-ext-bridges-v6 dst -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -j DOCKER-ISOLATION-STAGE-1
-A FORWARD -m set --match-set docker-ext-bridges-v6 dst -j DOCKER
-A FORWARD -j DROP
