Hi there, I use bridge-utils to set up a bridge (basically I use Xen...) and now I want to filter packets coming from (or going to) specific bridge ports. I use the PHYSDEV extension for that and in general that works fine. However, I thought all bridged packets traverse the iptables FORWARD chain, but in my case they don't! As far as I know, every bridged packet should go through this chain, so I'm wondering what might be the reason that this is not the case on my machine. Can anyone help me on that? Cheers, Anna