[Unit]
Description=IPTables Docker Rules
After=docker.service

[Service]
Type=oneshot
ExecStart=/usr/sbin/iptables -I DOCKER-USER -i br0 -o br0 -j ACCEPT

[Install]
WantedBy=multi-user.target