Comment # 2 on bug 911590 from Dominique Leuenberger

The report is rather that fwzs messes with what NM configures in order to be
able to offer "Shared to other computers"

so, you're right: fwzs is not supposed to mess with IPtable entries it is not
responsible for.