Dirty neutron patch for enabling DHCP server when port isn't in security groups

0001-no-security-allows-dhcp-server.patch

diff --git a/neutron/agent/linux/iptables_firewall.py b/neutron/agent/linux/iptables_firewall.py
index 33793a0..5bb570e 100644
--- a/neutron/agent/linux/iptables_firewall.py
+++ b/neutron/agent/linux/iptables_firewall.py
@@ -343,7 +343,7 @@ class IptablesFirewallDriver(firewall.FirewallDriver):
             security_group_rules)
         ipv4_iptables_rule = []
         ipv6_iptables_rule = []
-        if direction == EGRESS_DIRECTION:
+        if direction == EGRESS_DIRECTION and port.get('security_groups'):
             self._spoofing_rule(port,
                                 ipv4_iptables_rule,
                                 ipv6_iptables_rule)