Comment # 14 on bug 1003886 from Michal Kube��ek

(In reply to Richard Brown from comment #12)
> Besides the obvious problem that SLE 15 is based on Factory, so if you don't
> know why you did it, you could be consenting to an inexplicable regression
> for future SUSE Open Stack Cloud versions based on SLE 15?

Since kernel 3.18, bridge netfilter implementation was moved into a separate
module br_netfilter so that there is no netfilter on bridge devices unless
br_netfilter is loaded (which is not done automatically).

We have a workaround in SLE12 SP2 (and at least 42.2) in suse-module-tools
which loads br_netfilter whenever bridge module is loaded. This is for backward
compatibility with SLE12 SP1 and GA (bsc#937216) but AFAICS there is nothing
like that in Factory so unless we transfer this hack to SLE15, it should be OK.