feat(forward): support multiple rules per tunnel (#220)