diff --git a/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br-cn-redirect.rules b/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br-cn-redirect.rules
index 61e8b44..e0bae57 100644
--- a/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br-cn-redirect.rules
+++ b/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br-cn-redirect.rules
@@ -22,9 +22,3 @@
         tcp sport 10168 tcp sport set 10166 notrack
     }
 }
-
-table inet filter {
-    chain gbmc_br_redir_input {
-        mark 0xff drop
-    }
-}
diff --git a/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br.rules b/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br.rules
index 5bc58f0..72dde39 100644
--- a/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br.rules
+++ b/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br.rules
@@ -12,8 +12,8 @@
   chain gbmc_br_input {
     type filter hook input priority 0; policy drop;
     iifname != gbmcbr accept
+    mark 0xff drop
     ct state established accept
-    jump gbmc_br_redir_input
     jump gbmc_br_int_input
     jump gbmc_br_pub_input
     reject
@@ -35,3 +35,4 @@
     ip6 nexthdr icmpv6 accept
   }
 }
+