basic zone security groups

[Marcus Sorensen]

Quick question, I deployed a basic zone today on 4.1 for testing, and
I chose the default network provider WITHOUT security groups. The
result was that all of the instances deployed could not host services.
They could get out, but nothing could reach their IPs. I ran an
'ebtables -t nat -L' and saw that there were rules set up for each
instance, but there were no security group settings available to
adjust. Is this a bug, or was I doing something wrong?