Pardon me if this a little off-topic, I don't know where else to post this question. We are trying to add encryption support at layer II. Decrypting-hook on NF_BR_LOCAL_IN and encrypting-hook at NF_BR_LOCAL_OUT. But, this is breaking iptables pre-routing chain (Now I am not able to do port-forwarding). Any ideas? Thanks, -Raj