Mac address filtering on bridged interfaces - possible?

[Bodo Bauer]

Hi,

I'm working on some improvements to OpenAP
(http://opensource.instant802.com). A linux distribution for Intel based
wireless access points. I'd like to enable MAC address based filtering
on the wireless traffic to keep unknown (and unwanted) traffic away from
the wire.

The AP is basically providing a bridge between the wired and the
wireless interfaces:

# brctl show
bridge name     bridge id               STP enabled     interfaces
br0             0064.0090d100ddc7       yes             wlan0
                                                        wlan0ap0
                                                        wlan0ap1
                                                        wlan0ap2
                                                        wlan0ap3
                                                        wlan0ap4
                                                        eth0

The problem is that none of the 'standard' queues (INPUT, OUTPUT,
FORWARD) see the traffic going over the bridge. Is there any way (kernel
patch, module, app) to get a netfilter queue for the bridged traffic?

Thanks,
        BB

PS: I'm not subscribed, please CC me in answer mails...