enable hairpin mode on virtual interface bridge port

This is to support being able to DNAT/MASQ traffic from a container back into itself (dotcloud/docker#4442)

See subsequent pull request on docker project for details.
You are returning errors above this without ever closing this file. You either need to use a `defer` or close the file before returning the errors