On Friday 2008-04-18 13:41, Javier Prieto Martínez wrote: > I need the bridge because the appliance is supposed to be totally > trasparent to the network, as its main use is logging traffic. Often layer-2 transparency is not needed, but what do I know. If you just log layer-3 (IP addrs) and up without caring about MAC addresses, make a standard routing setup, i.e. 192.168.1.0/22 on eth0, 192.168.2.0/22 on eth1, and enable forwarding; kinda like that. And let hosts use 192.168.1.1/192.168.2.1 as a default gw (as they already should do). -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html