My problem has been solved for a week now. Here is the summary. Problem: If a PPPoE connection is initialized over a bridge the nat table will see any incoming IP packet as coming from the bridge interface, and not the ppp interface. Solution 1: Set the following sysctl key to 0 net.bridge.bridge-nf-filter-pppoe-tagged Warning: If adding this to /etc/sysctl.conf (or equivalent), make sure that the bridge module gets loaded *before* sysctl is applied. Solution 2: Compile the kernel without CONFIG_BRIDGE_NETFILTER. Both of these worked for me. I'm sticking with number two. -- () Georgi Georgiev () If you don't care where you are, then you () () chutz@xxxxxxx () ain't lost. () () http://www.gg3.net/ () () -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html