diff --git a/emhttp/plugins/dynamix.vm.manager/include/libvirt.php b/emhttp/plugins/dynamix.vm.manager/include/libvirt.php
index d70f3c992..3455c1e52 100644
--- a/emhttp/plugins/dynamix.vm.manager/include/libvirt.php
+++ b/emhttp/plugins/dynamix.vm.manager/include/libvirt.php
@@ -679,7 +679,7 @@
 										$nicboot
 									</interface>";
 						} else {
-							$netstr .= "<interface type='direct'>
+							$netstr .= "<interface type='direct' trustGuestRxFilters='yes'>
 										<mac address='{$nic['mac']}'/>
 										<source dev='" . htmlspecialchars($nic['network'], ENT_QUOTES | ENT_XML1) . "' mode='bridge'/>
 										<model type='$netmodel'/>
diff --git a/etc/rc.d/rc.libvirt b/etc/rc.d/rc.libvirt
index 3b762d1d4..bec001ac2 100755
--- a/etc/rc.d/rc.libvirt
+++ b/etc/rc.d/rc.libvirt
@@ -186,11 +186,11 @@ start_libvirtd() {
         if [[ $NAME == br ]]; then
           # change to macvtap
           logger -t $(basename $0) "change $DEV to macvtap in $XML"
-          sed -ri "${ROW[$i]} s/<interface type='bridge'>/<interface type='direct'>/; $ROW2 s/<source bridge='$DEV'\/>/<source dev='${DEV/$NAME/vhost}' mode='bridge'\/>/" "$XML"
+          sed -ri "${ROW[$i]} s/<interface type='bridge'>/<interface type='direct' trustGuestRxFilters='yes'>/; $ROW2 s/<source bridge='$DEV'\/>/<source dev='${DEV/$NAME/vhost}' mode='bridge'\/>/" "$XML"
         else
           # change to bridge
           logger -t $(basename $0) "change $DEV to bridge in $XML"
-          sed -ri "${ROW[$i]} s/<interface type='direct'>/<interface type='bridge'>/; $ROW2 s/<source dev='$DEV' mode='bridge'\/>/<source bridge='${DEV/$NAME/br}'\/>/" "$XML"
+          sed -ri "${ROW[$i]} s/<interface type='direct'( trustGuestRxFilters='yes')?>/<interface type='bridge'>/; $ROW2 s/<source dev='$DEV' mode='bridge'\/>/<source bridge='${DEV/$NAME/br}'\/>/" "$XML"
         fi
       fi
     done