use the upstream linuxbridge_conf template

IptableFirewallDriver is now configured in the upstream template