I'm trying to get NFS (udp) to work through an iptables firewall that also has a bridge. The bridge is eth0 and eth2. The NFS server resides on eth3, the client exist on eth2 the internet is on eth0. My iptables contains this as the FORWARD rule: -A FORWARD -m physdev --physdev-in eth2 -j ACCEPT -A FORWARD -i eth3 -j ACCEPT We did have it locked down pretty much but we want to try to find out why this doesn't work. Some posts say that if the MTU is different then it might fragment but in this case they are both 1500. Does anyone have any basic ideas why this might not be working? Gary Wayne Smith