Hm, I am pretty sure it's not needed in the nova cookbook. It should be moved to the neutron cookbook I guess if it is still needed. But AFAIK neutron already takes care to enable ip forwarding itself. 

I am not sure if we really need to disable reverse-path filtering. @bmwiedemann do you remember why this was added?