> New test this morning. > in VM hardware the firewall was not enabled on the interface. > I have the tap chains created on forward chain. > So the solution VM by VM is working. It will be longer to configure > (need to do it on each VM). We just need a way to configure mandatory security groups, maybe per bridge?