Comment 4 for bug 1514731

Looking at the filters for neutron:

  neutron/rootwrap.d/l3.filters

has the only reference to conntrack; neutron-l3-agent has the correct depends on conntrack but I'm guessing that the linuxbridge configuration you're using is not trying todo l3 routing.

So I'm a bit puzzled as to why this is needed.