Comment 3 for bug 1673420

I've also submitted a fix: https://review.openstack.org/446609

Different to yours, but also resolves the missing iptables dependency and I think this addresses the problem at a more root-cause level, however the hackish sed line is still in play here, perhaps it ought to be re-thought.