we do the equivalient of

iptables -I FORWARD -i netmaker -j netmakerfilter

so I don't understand why you need the additional iptables rule