I’m surprised one of your containers is working connected to br0, as really it should be being filtered on the external network due to it using another MAC. Is it possible you were using a different setup on your old host or that some MACs are allowed?