> Thats a good point -- Leonardo, is the > "net.bridge.bridge-nf-call-ip6tables" sysctl on? Running # sudo sysctl -a I can see: net.bridge.bridge-nf-call-ip6tables = 1 So this packets are sent to host iptables for processing? (Sorry for the delay, I did not received the previous e-mails. Please include me in to/cc.)