Changes

Both bridges can send packages to any host on the same network(because it was created with "'''forward mode=nat'''", see [[KVM#Add new network]] for details). otherwise everything Everything else is rejected that was sent to or form the bridges (last four lines)