Hi, > >iptables -L FORWARD -nv >Chain FORWARD (policy DROP 0 packets, 0 bytes) >pkts bytes target prot opt in out source >destination >X X ACCEPT all -- br0 br0 0.0.0.0/0 >0.0.0.0/0 What is that supposed to do? Forwarding on the IP layer, by definition, happens between different interfaces. Although this rule is most likely a no-op, you should remove it to reduce confusion. -nik