Hello, I have two containers connected to a bridge. Let's assume the following IP packet goes through the bridge: 192.168.101.3:80 > 192.168.101.4:12345 I would like to change the packet as follows: 1.2.3.4:80 > 192.168.101.4:12345 am I right that this has to be done as a -t nat POSTROUTING -j SNAT iptables, but that will only work if ebtables forces the packet into BROUTE mode first? Something like: ebtables -t broute -I BROUTING -p 0x800 -i bridge \ --ip-proto tcp --ip-sport 80 --ip-src 192.168.101.3/32 \ -j DROP iptables -t nat -I POSTROUTING -s 192.168.101.3/32 -p tcp --sport 80 \ -j SNAT --to-source 1.2.3.4:80 Or am I completely mistaken? Thank you.