Here are the rules, policy is set to DROP on all accounts. ebtables -t filter -P INPUT DROP ebtables -t filter -A INPUT -p IPv4 -j ACCEPT ebtables -t filter -A INPUT -p ARP -j ACCEPT ebtables -t filter -A INPUT -d BGA -j ACCEPT ebtables -t filter -P FORWARD DROP ebtables -t filter -A FORWARD -p IPv4 -j ACCEPT ebtables -t filter -A FORWARD -p ARP -j ACCEPT ebtables -t filter -A FORWARD -d BGA -j ACCEPT ebtables -t filter -P OUTPUT DROP ebtables -t filter -A OUTPUT -p IPv4 -j ACCEPT ebtables -t filter -A OUTPUT -p ARP -j ACCEPT ebtables -t filter -A OUTPUT -d BGA -j ACCEPT Hopefully someone will find this info also usefull. -- Kind Regards Etienne