my policies are set to -P FORWARD ACCEPT because its just an simple ethernet router, w/o nat and stuff. so i thought iptables'll also forward broadcasts from one net to the other.
No. Netfilter is not going to forward them all-by-itself. The packet will end up in FORWARD chain only if the kernel decides it needs to route it from one interface to another. So, if your kernel is not routing broadcast packets (it shouldn't by default), you will not see them in FORWARD chain.
-- Aleksandar Milivojevic <amilivojevic@xxxxxx> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7
