Honeypots: iptables & bridging won't work together

[Rock Lobster <rocklobster () cheerful com>]

It seems I'm not destined to have a working honeypot :)

I had this working perfectly before and I have no idea whats changed since but its really frustrating. Currently I can 
get bridging to work fine, no problems, but iptables won't filter/log (most) things. It will do some though.

I'm using 2.4.28 kernel.  The relavent ebtables patch has been applied and I have compiled/modularised everything that 
needs to be done, that I'm aware of.

When I run the rc.firewall script it does it just without error and my /var/log/messages says it has setup the bridge 
fine. Now the only thing iptables seems to log is incomming UDP packets and nothing else. I've *no* idea why. I have 
modified the rc.firewall script to an extent but why it logs udp and nothing else I don't know.

I have cleaned/upgraded my kernel from .27, re-applied the patch, reinstall ebtables for a laugh, even 
removed/reinstall syslog-ng.

Does anyone have an ideas?