[ha] kvm: Disable ip_forward