Bridge table: broute Bridge chain: BROUTING, entries: 2, policy: ACCEPT --pkttype-type ! otherhost -j ACCEPT , pcnt = 119 -- bcnt = 3808 -p IPv4 -j BROUTE4, pcnt = 0 -- bcnt = 0 Bridge chain: BROUTE4, entries: 12, policy: ACCEPT -p IPv4 --logical-in br0 --ip-src 192.168.10.0/24 --ip-proto tcp --ip-dport 80 -j redirect --redirect-target DROP, pcnt = 0 -- bcnt = 0 -p IPv4 --logical-in br0 --ip-dst 192.168.10.0/24 --ip-proto icmp -j redirect --redirect-target DROP, pcnt = 0 -- bcnt = 0 -p IPv4 --logical-in br0 --ip-src 192.168.11.0/24 --ip-proto tcp --ip-dport 80 -j redirect --redirect-target DROP, pcnt = 0 -- bcnt = 0 -p IPv4 --logical-in br0 --ip-dst 192.168.11.0/24 --ip-proto icmp -j redirect --redirect-target DROP, pcnt = 0 -- bcnt = 0 -p IPv4 --logical-in br0 --ip-src 10.242.2.0/24 --ip-proto tcp --ip-dport 80 -j redirect --redirect-target DROP, pcnt = 0 -- bcnt = 0 -p IPv4 --logical-in br0 --ip-dst 10.242.2.0/24 --ip-proto icmp -j redirect --redirect-target DROP, pcnt = 0 -- bcnt = 0 -p IPv4 --logical-in wlan0 --ip-src 192.168.10.0/24 --ip-proto tcp --ip-dport 80 -j redirect --redirect-target DROP, pcnt = 0 -- bcnt = 0 -p IPv4 --logical-in wlan0 --ip-dst 192.168.10.0/24 --ip-proto icmp -j redirect --redirect-target DROP, pcnt = 0 -- bcnt = 0 -p IPv4 --logical-in wlan0 --ip-src 192.168.11.0/24 --ip-proto tcp --ip-dport 80 -j redirect --redirect-target DROP, pcnt = 0 -- bcnt = 0 -p IPv4 --logical-in wlan0 --ip-dst 192.168.11.0/24 --ip-proto icmp -j redirect --redirect-target DROP, pcnt = 0 -- bcnt = 0 -p IPv4 --logical-in wlan0 --ip-src 10.242.2.0/24 --ip-proto tcp --ip-dport 80 -j redirect --redirect-target DROP, pcnt = 0 -- bcnt = 0 -p IPv4 --logical-in wlan0 --ip-dst 10.242.2.0/24 --ip-proto icmp -j redirect --redirect-target DROP, pcnt = 0 -- bcnt = 0