This patch on pve-manager and pve-firewall (on 3.4 stable branch) add the control on FORWARD chain. This is very usefull if someone wants to have gusts in different subnets (on different vlans) and add a firewall between the subnets. Regards, Flav