Bridge table: filter Bridge chain: INPUT, entries: 0, policy: ACCEPT Bridge chain: FORWARD, entries: 8, policy: ACCEPT -d BGA -j DROP -d Multicast -j mark --mark-set 0x1 --mark-target CONTINUE -d Broadcast -j mark --mark-set 0x2 --mark-target CONTINUE -p ARP -j DROP -p 0x8906 -j DROP -p 0x8914 -j DROP -p IPv6 --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-solicitation -j DROP -p IPv6 --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-advertisement -j DROP Bridge chain: OUTPUT, entries: 2, policy: ACCEPT -p ARP -o eth0+ --arp-op Request -j ACCEPT -p ARP --arp-op Request --nflog-group 100 -j DROP