Somehow ipchains forwarding got enabled by default???

[Julian Stoev <j.h.stoev@ieee.org>]

Hi!
I just noticed some strange change in my ipchains default state.
Right now it is:
Chain input (policy ACCEPT):
Chain forward (policy ACCEPT):
Chain output (policy ACCEPT):

I remeber until very recently I had only input and output chains. Still 
less /proc/sys/net/ipv4/ip_forward gives 0.

I did not change my kernel configuration recently and I wonder how did the 
above mentioned change occur? I upgrade to frozen daily, so it may be some 
updated package? If so, I don't think this is a good idea.

If the reason is not in some Debian package, I *have* to find how this 
change happened and probably become a little bit paranoic... :-(

Thank you!

--JS