Hi, I am new to using ebtables and my requirements is to do L2 NATing of clients connected on the bridge, through WiFi interface. As a proof of concept, I am able to add following rules in ebtables and have the functionality that I want. (this is for one client connected on bridge) 1. ebtables -t nat -A POSTROUTING -o ath0 -j snat --to-src 00:03:7F:12:06:90 --snat-arp --snat-target ACCEPT 2. ebtables -t nat -A PREROUTING -p 0x0800 -i ath0 --ip-dst 192.168.40.239 -j dnat --to-dst 08:00:46:6A:A4:AC --dnat-target ACCEPT 3. ebtables -t nat -A PREROUTING -p 0x0806 -i ath0 --arp-ip-dst 192.168.40.239 -j dnat --to-dst 08:00:46:6A:A4:AC --dnat-target ACCEPT With above rules, client PC (192.168.40.239) is able to ping gateway (through WiFi - WAN interface) and it's packets are properly NATed. Now practically, there will be many clients connected on the bridge and run time they will join and leave the bridge port. So now I need to add/delete these rules (specifically 2 and 3) for each client as and when they join / leave. I was thinking of modifying the ebtables rules from the kernel itself (at the time of dhcp / arp / ip packet flow for any new client). How can I add / delete the above rules (2 and 3), from the kernel module? Basically I don't want to use ebtables user space tool to add/delete rules in ebtables, neither I want to extend ebtables. I just want to be able to create / delete ebtables rule entries from kernel space. Any help on this will be appreciated. Thanks, Parthiv -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html