As said here: http://ebtables.netfilter.org/documentation/bridge-nf.html bridge-nf-call-arptables bridge-nf-call-iptables bridge-nf-call-ip6tables are enabled by default echo 1 > bridge-nf-filter-vlan-tagged does nothing echo 1> bridge-nf-filter-pppoe-tagged drops the connection thanks -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html