Comment 20 for bug 1112912

@salvatore, yes, per the TODO item in the code that get_firewall_required method was known to need more work. It was/is blocked on Neutron being able to provide suitable metadata when plugging the VIF. Unfortunately it seems the changeset fixing the neutron side of things in comment #17 has been abandoned.