diff -ruN /usr/src.org/sys/net/bridge.c /usr/src/sys/net/bridge.c
--- /usr/src.org/sys/net/bridge.c	Sat Sep 23 20:01:37 2000
+++ /usr/src/sys/net/bridge.c	Sat Sep 23 20:06:15 2000
@@ -772,6 +772,9 @@
 	m_freem(m);
 	if (canfree == 0) /* m was a copy */
 	    m_freem(*m0);
+#ifdef DIAGNOSTIC
+	printf("bdg_forward: No rules match, so dropping packet!\n");
+#endif
 	*m0 = NULL ;
 	return 0 ;
     }
diff -ruN /usr/src.org/sys/net/if_ethersubr.c /usr/src/sys/net/if_ethersubr.c
--- /usr/src.org/sys/net/if_ethersubr.c	Sat Sep 23 20:01:37 2000
+++ /usr/src/sys/net/if_ethersubr.c	Sat Sep 23 20:04:49 2000
@@ -446,8 +446,16 @@
 			m_freem(m);
 			return;
 		}
-		if (bif != BDG_LOCAL)
+		if (bif != BDG_LOCAL) {
 			bdg_forward(&m, eh, bif);	/* needs forwarding */
+			/*
+			 * Do not continue if bdg_forward() processed our
+			 * packet (and cleared the mbuf pointer m) or if
+			 * it dropped (m_free'd) the packet itself.
+			 */
+			if (m == NULL)
+				return;
+		}
 		if (bif == BDG_LOCAL
 		    || bif == BDG_BCAST
 		    || bif == BDG_MCAST)