iptables is not picking tap interface packets

[tincboy]

I've used a simple iptables rule to test some idea, but I can see it's not picking any packet on tap interface.
Is that normal?

root@node01:~# iptables -I FORWARD -i tap101i0

results:

root@node01:~# iptables -L FORWARD -v -n 
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0            all  --  tap101i0 *       0.0.0.0/0            0.0.0.0/0

 

[tincboy]

I've used a simple iptables rule to test some idea, but I can see it's not picking any packet on tap interface.
Is that normal?

root@node01:~# iptables -I FORWARD -i tap101i0

results:

root@node01:~# iptables -L FORWARD -v -n
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target     prot opt in     out     source               destination
    0     0            all  --  tap101i0 *       0.0.0.0/0            0.0.0.0/0

It fixed by using "-m physicaldev --physdev-in tap101i0" instead of -i, and it's because tap is layer 2 not layer 3