/usr/share/netcf/iptables-forward-bridged is in libnetcf1 1:0.2.3-4ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1
-I FORWARD -m physdev --physdev-is-bridged -j ACCEPT