Comment 6 for bug 1506076

Just another comment: if the whole network has disabled port security, then it is easy with the linuxbridge agent:

iptables -I neutron-linuxbri-PREROUTING -t raw -i brqfa4477a2-bf -j NOTRACK

So just add a NOTRACK for the bridge.