Hello,
Sorry for what may appear to be a strange question, but shouldn't
there be a check against IFBIF_BLOCKNONIP in bridge_output() in
sys/net/if_bridge.c?
Something like this :
--- if_bridge.c.orig Tue Jul 21 00:54:29 2015
+++ if_bridge.c Sat Nov 21 16:05:12 2015
@@ -1051,6 +1051,10 @@
(m->m_flags & (M_BCAST | M_MCAST)) == 0)
continue;
+ if (p->bif_flags & IFBIF_BLOCKNONIP &&
bridge_blocknonip(eh, m)) {
+ continue;
+ }
+
if (IF_QFULL(&dst_if->if_snd)) {
IF_DROP(&dst_if->if_snd);
sc->sc_if.if_oerrors++;