[fedora-virt] bridge network with iptables running on host?

[Tom Horsley]

Long before I ever tried using virtual machines, I painstakingly
came up with some iptables settings to make my system as closed
as possible to most of the outside world while still being open
to my local 192.168.1.0/24 network.

I'm now playing around with VMs on my system, using bridging
because I want each VM to be a fully fledged member of my
local network.

It works great as long as I turn off iptables on the host, so
now I wonder what the heck is preventing the bridge traffic
from operating? (Actually it is just the VMs that can't
get out - I get can into them OK).

Do I have to tell the host to forward everything (rather than
forwarding nothing as I have it now?).