Subject line says it all. Every time I restart a network libvirt inserts its standard rules at the head of the ip forward chain. The deny lines in there clobber access to my servers. Is there any way to make it append those rules at a specific number or at the end by default? Many Thanks, Steve