With Docker >= 1.13.1 the default the default FORWARD chain policy
is configured to DROP, for the l3 agent to function as expected and
VMs reach the outside world correctly this needs to be set to ACCEPT.
Change-Id: I6bea3304f5eb4ab6b37283e94e20cda7e4119a44