dns64 docs: document that policy.FORWARD works OK

At least it seems so...
5 jobs for dns64-fw
in 23 seconds and was queued for 2 seconds