Bridge forwarding and firewall rules

[fgervais]

Does traffic need to pass through the firewall to get handled at the layer 2 on the bridge?

For example, let say on my bridge I deny all. Will broadcasts still be forwarded?

[viragomann]

@fgervais
Yes firewall rules on the interfaces or on the bridge or NAT rules affect this traffic.

Also consider the values of the tuneables
net.link.bridge.pfil_member
net.link.bridge.pfil_bridge