Install a MAILTO variable in /etc/crontab.
disable bridge-nf-* sysctl configuration, I want my LXCs to be correctly protected by the host firewall.