diff --git a/src/vnm_mad/remotes/ebtables/Ebtables.rb b/src/vnm_mad/remotes/ebtables/Ebtables.rb
index 09fd82caa2..3bc8dfab34 100644
--- a/src/vnm_mad/remotes/ebtables/Ebtables.rb
+++ b/src/vnm_mad/remotes/ebtables/Ebtables.rb
@@ -51,7 +51,7 @@ class EbtablesVLAN < VNMMAD::VNMDriver
                         "-o #{tap} -j DROP"
                 out_rule="FORWARD -s ! #{iface_mac} -i #{tap} -j DROP"
 
-                ebtables(in_rule)
+                ebtables(in_rule) if nic[:filter_mac_spoofing] =~ /yes/i
                 ebtables(out_rule)
             end
         end