Mark McLoughlin wrote: > I'd like the default rule in Fedora to be: > > -A FORWARD -m physdev ! --physdev-is-bridged -j REJECT --reject-with icmp-admin-prohibited Ah, that worked out well, and is what I ended up committing. Thanks! Chris Lalancette