> For example rather than just vmtab116i0 maybe name it something like > vmbr1tab116i0 because this interface is attached to vmbr1 > > The reason for doing this is it would make defining firewall rules a > lot more simple and robust. Why. Please can you elaborate on that? - Dietmar