Hello, first please CC me since i did not subscribe. i am currently setting up a VPN with some friends, using openvpn. Let's do some ascii art to explain the (basic) network : __________ ___________ | 10.0.4.1 | <--- VPN ---> | 10.0.0.10 | ---------- ----------- | | eth0 __________ __________ | 10.0.4.2 | | 10.0.0.1 | ---------- ---------- The VPN is materialized by a tap ethernet interface. I am 10.0.0.10. I am bridging eth0 (lan) and tap1 (vpn) together. Everything works fine except that broadcast pings from 10.0.4.1 only get a reply from 10.0.0.10. Here's a tcpdump of the ping on the bridge interface : 18:55:31.683690 IP 10.0.4.1 > 10.0.255.255: icmp 64: echo request seq 30 18:55:31.683733 IP 10.0.0.10 > 10.0.4.1: icmp 64: echo reply seq 30 18:55:31.683841 IP 10.0.0.1 > 10.0.0.10: icmp 64: echo reply seq 30 As you can see .1 answers to .10, which is wrong. How can I make it work ? The thing is that it works on 10.0.4.1, I mean, if i ping 10.0.255.255 from 10.0.0.10, 10.0.4.2 replies. This gateway is using shorewall, I think the config of iptables has something to do with this but I cannot find what. I'm using linux 2.6.10-rc3. Regards, Rapha?l