Comment 1 for bug 1163312

the non-existence of /var/lock/nova is a packaging problem. Not sure what is going on with the iptables command however. Can you post a dump of your existing iptables rules?