To summarize.. If anyone has security groups working on XenServer, would you mind posting relevant portions of nova/neutron config from the compute node?