Don't apply connection tracking flows for interfaces that aren't in any security groups
Merge pull request #155 from axsh/no-secg-no-contrack

Don't do connection tracking without security groups
Merge remote branch 'origin/master' into feature-tunnel-host-port