Sorry if this is more of an ebtables thing, but probably is relevant to how the 2.5 kernel responds... When you configure a bridge, is there any way to have the real interface name in indev_name or outdev_name for userspace modules? Seeing a FORWARD packet from "br0" to "br0" is not helpful... Also, is there any other solution other than ebtables to have a bridge send packets to an iptables userspace module? -Scott __________________________________________________ Do you Yahoo!? Yahoo! Tax Center - File online, calculators, forms, and more http://tax.yahoo.com