> what should i do? > in my iptables script i use -i eth0 > in my log the packet dropped because (IN=br0 PHYSIN=eth0) IN doesn´t match You can jump to a user defined chain and then check if it matches br0, if so RETURN, if not DROP. Or you can switch to Linux 2.5. -- cheers, Bart