1 This module matches on the bridge port input and output devices enslaved 2 to a bridge device. This module is a part of the infrastructure that enables 3 a transparent bridging IP firewall and is only useful for kernel versions 4 above version 2.5.44. 5 .TP 6 [\fB!\fP] \fB\-\-physdev\-in\fP \fIname\fP 7 Name of a bridge port via which a packet is received (only for 8 packets entering the 9 .BR INPUT , 10 .B FORWARD 11 and 12 .B PREROUTING 13 chains). If the interface name ends in a "+", then any 14 interface which begins with this name will match. If the packet didn't arrive 15 through a bridge device, this packet won't match this option, unless '!' is used. 16 .TP 17 [\fB!\fP] \fB\-\-physdev\-out\fP \fIname\fP 18 Name of a bridge port via which a packet is going to be sent (for bridged packets 19 entering the 20 .BR FORWARD 21 and 22 .B POSTROUTING 23 chains). If the interface name ends in a "+", then any 24 interface which begins with this name will match. 25 .TP 26 [\fB!\fP] \fB\-\-physdev\-is\-in\fP 27 Matches if the packet has entered through a bridge interface. 28 .TP 29 [\fB!\fP] \fB\-\-physdev\-is\-out\fP 30 Matches if the packet will leave through a bridge interface. 31 .TP 32 [\fB!\fP] \fB\-\-physdev\-is\-bridged\fP 33 Matches if the packet is being bridged and therefore is not being routed. 34 This is only useful in the FORWARD and POSTROUTING chains. 35
