Hello. I'm having problems trying to broute packets from ebtables to iptables (DROP target) when the packet contains VLAN tags. My system is sniffing all packets coming from a tap interface, a bridge is configured so that the interface is set to promiscuous mode. When the packets does not contain the VLAN tags, everything works ok, and the packet is sent to the iptables layer without any problem. But when the packet contains VLAN info, the packet seems to get dropped, and iptables layer does not receive it. Please note that I need promiscuous mode both for destination MAC addresses and VLAN tags. I mean, I want to sniff everything: all packets going to anywhere and belonging to any VLAN. Thanks. -Bob -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html