rule('FORWARD --logical-in br-client -i ! bat0 -j LOCAL_FORWARD')