I have a bond0 interface with eth0 and eth1, which is then bridged under br0. Packets will not forward to a br0 connected VM with -A FORWARD -m physdev --physdev-is-bridged -j ACCEPT Right now I have it working properly with -A FORWARD ! -d 10.0.0.2 -j ACCEPT I hope there is a more ideal solution, and would appreciate any suggestions. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html