73a74
> #include <linux/firewall.h>
1694c1695
< 	
---
> 
1770a1772,1779
> 			/* drop it if it doesn't pass the firewall */
> 			if (skb->protocol == __constant_htons(ETH_P_IP))
> 			{
> 				if (call_fw_firewall(PF_INET, skb->dev,
> 				    skb->data + ETH_HLEN, NULL, &skb) 
> 				    != FW_ACCEPT)
> 					return(br_dev_drop(skb));
> 			}
1828a1838,1848
> 			/* drop it if it doesn't pass the firewall */
> 			if (nskb->protocol == __constant_htons(ETH_P_IP))
> 			{
> 				if (call_fw_firewall(PF_INET, nskb->dev,
> 				    nskb->data + ETH_HLEN, NULL, &nskb) 
> 				    != FW_ACCEPT) 
> 				{
> 					br_dev_drop(nskb);
> 					continue;
> 				}
> 			}