I'm guessing you're using Windows Network Load balancein (NLB)? NLB relies on all incoming traffic being sent to all the nodes, the way it does this is by either not sending outgoing ethernet frames from the cluster MAC address (unicast mode, so that ordinary switches don't learn its origin and broadcast all the data) or by using a multicast ethernet address (multicast mode) as the cluster MAC. Either way you are flooding you L2 broadcast domain with all incoming traffic, this is not always a clever idea. Maybe this creates problems for Linux bridging? Regards, Thomas -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html