1 domain eb chain INPUT {
2 saddr 00:11:22:33:44:55 DROP;
3 proto IPv4 ip-source 192.168.1.1 DROP;
4 proto ARP arp-mac-src 00:11:22:33:44:55 ACCEPT;
5 proto ARP arp-gratuitous ACCEPT;
7 interface eth0 logical-in br0 outerface eth1 logical-out br1 ACCEPT;
8 saddr Multicast daddr Broadcast DROP;