Avoid NAT on Bridges. Bridges are L2 devices, really.