MLH wrote / skrev:

> Just creating the bridge results in blocking (at least) tcp packets.

Perhaps a dumb question but are you defaulting to deny for tcp?
You probably have to create rules for the bridge interface as well in 
that case.
-- 
Pelle Johansson
<morth@morth.org>