Proper ip-per-pod on GCE.

Back out the second iptables rule, now that we know what the problem was - we
need to open a firewal rule on each minion.  Testing: I brought up a cluster with this branch.