diff -Nurw bridge-utils/brctl/brctl.c bridge-utils-patched/brctl/brctl.c
--- bridge-utils/brctl/brctl.c	Fri Dec  7 09:25:58 2001
+++ bridge-utils-patched/brctl/brctl.c	Tue Apr 16 15:25:22 2002
@@ -26,23 +26,31 @@
 
 char *help_message =
 "commands:\n"
-"\taddbr\t\t<bridge>\t\tadd bridge\n"
-"\taddif\t\t<bridge> <device>\tadd interface to bridge\n"
-"\tdelbr\t\t<bridge>\t\tdelete bridge\n"
-"\tdelif\t\t<bridge> <device>\tdelete interface from bridge\n"
-"\tshow\t\t\t\t\tshow a list of bridges\n"
-"\tshowmacs\t<bridge>\t\tshow a list of mac addrs\n"
-"\tshowstp\t\t<bridge>\t\tshow bridge stp info\n"
+"\taddbr\t\t<bridge>\t\t\tadd bridge\n"
+"\taddif\t\t<bridge> <device>\t\tadd interface to bridge\n"
+"\tdelbr\t\t<bridge>\t\t\tdelete bridge\n"
+"\tdelif\t\t<bridge> <device>\t\tdelete interface from bridge\n"
+"\tshow\t\t\t\t\t\tshow a list of bridges\n"
+"\tshowmacs\t<bridge>\t\t\tshow a list of mac addrs\n"
+"\tshowmac\t\t<bridge>\t\t\tshow a list of mac addrs (no title)\n"
+"\tshowftdb\t<bridge>\t\t\tshow macs in the filter database (ftdb)\n"
+"\tshowstp\t\t<bridge>\t\t\tshow bridge stp info\n"
 "\n"
-"\tsetageing\t<bridge> <time>\t\tset ageing time\n"
-"\tsetbridgeprio\t<bridge> <prio>\t\tset bridge priority\n"
-"\tsetfd\t\t<bridge> <time>\t\tset bridge forward delay\n"
-"\tsetgcint\t<bridge> <time>\t\tset garbage collection interval\n"
-"\tsethello\t<bridge> <time>\t\tset hello time\n"
-"\tsetmaxage\t<bridge> <time>\t\tset max message age\n"
-"\tsetpathcost\t<bridge> <port> <cost>\tset path cost\n"
-"\tsetportprio\t<bridge> <port> <prio>\tset port priority\n"
-"\tstp\t\t<bridge> <state>\tturn stp on/off\n";
+"\tftdbdelmac\t<bridge> <mac>\t\t\tremoves a mac from the ftdb\n"
+"\tftdbaddmac\t<bridge> <mac>\t\t\tadds a mac to the ftdb\n"
+"\tismacexist\t<bridge> <mac>\t\t\tcheck the existence of mac address\n"
+"\tsetfilter\t<bridge> src|dest on|off\tset mac filtering\n"
+"\tsetpolicy\t<bridge> src|dest allow|deny\tset mac filter default policy\n"
+"\n"
+"\tsetageing\t<bridge> <time>\t\t\tset ageing time\n"
+"\tsetbridgeprio\t<bridge> <prio>\t\t\tset bridge priority\n"
+"\tsetfd\t\t<bridge> <time>\t\t\tset bridge forward delay\n"
+"\tsetgcint\t<bridge> <time>\t\t\tset garbage collection interval\n"
+"\tsethello\t<bridge> <time>\t\t\tset hello time\n"
+"\tsetmaxage\t<bridge> <time>\t\t\tset max message age\n"
+"\tsetpathcost\t<bridge> <port> <cost>\t\tset path cost\n"
+"\tsetportprio\t<bridge> <port> <prio>\t\tset port priority\n"
+"\tstp\t\t<bridge> <state>\t\tturn stp on/off\n";
 
 void help()
 {
diff -Nurw bridge-utils/brctl/brctl_cmd.c bridge-utils-patched/brctl/brctl_cmd.c
--- bridge-utils/brctl/brctl_cmd.c	Fri Dec  7 09:23:02 2001
+++ bridge-utils-patched/brctl/brctl_cmd.c	Tue Apr 16 15:53:25 2002
@@ -17,14 +17,19 @@
  */
 
 #include <stdio.h>
+#include <unistd.h>
 #include <stdlib.h>
 #include <string.h>
 #include <sys/time.h>
+#include <sys/stat.h>
+#include <fcntl.h>
 #include <errno.h>
 #include <asm/param.h>
 #include "libbridge.h"
 #include "brctl.h"
 
+char *kern_mac_file = "/home/netreg/etc/misc-reports/kernel_macs";
+
 void br_cmd_addbr(struct bridge *br, char *brname, char *arg1)
 {
 	int err;
@@ -236,12 +241,15 @@
 
 void br_cmd_show(struct bridge *br, char *arg0, char *arg1)
 {
-	printf("bridge name\tbridge id\t\tSTP enabled\tinterfaces\n");
+	printf("           \t         \t\t           \tMAC filtering\t          \n" );
+	printf("bridge name\tbridge id\t\tSTP enabled\t src    dest \tinterfaces\n");
 	br = bridge_list;
 	while (br != NULL) {
 		printf("%s\t\t", br->ifname);
 		br_dump_bridge_id((unsigned char *)&br->info.bridge_id);
 		printf("\t%s\t\t", br->info.stp_enabled?"yes":"no");
+		printf("%5.5s %5.5s\t", br->info.flt_src ? br->info.flt_src_allow ? "allow" : "deny" : "off",
+					   br->info.flt_dest ? br->info.flt_dest_allow ? "allow" : "deny" : "off" );
 		br_dump_interface_list(br);
 
 		br = br->next;
@@ -300,6 +308,159 @@
 	}
 }
 
+void br_cmd_showmac(struct bridge *br, char *arg0, char *arg1)
+{
+	struct fdb_entry fdb[1024];
+	int offset;
+
+	offset = 0;
+	while (1) {
+		int i;
+		int num;
+
+		num = br_read_fdb(br, fdb, offset, 1024);
+		if (!num)
+			break;
+
+		qsort(fdb, num, sizeof(struct fdb_entry), compare_fdbs);
+
+		for (i=0;i<num;i++)
+			__dump_fdb_entry(fdb+i);
+
+		offset += num;
+	}
+}
+
+
+static int compare_ftdbs(const void *f0, const void *f1)
+{
+	return memcmp(((struct ftdb_entry*)f0)->mac_addr, ((struct ftdb_entry *)f1)->mac_addr, 6);
+}
+
+void br_cmd_showdismacs(struct bridge *br, char *arg0, char *arg1) 
+{
+	struct ftdb_entry fdb[1024];
+	int offset;
+	FILE *fp;
+
+	offset = 0;
+	fp = fopen(kern_mac_file, "W+");
+	while (1) {
+		int i;
+		int num;
+
+		num = br_read_ftdb(br, fdb, offset, 1024);
+		if (!num)
+			break;
+
+		qsort(fdb, num, sizeof(struct ftdb_entry), compare_ftdbs);
+
+		for (i=0;i<num;i++)
+			fprintf(fp, "%.2x%.2x%.2x%.2x%.2x%.2x\n",
+	               (fdb+i)->mac_addr[0], (fdb+i)->mac_addr[1], (fdb+i)->mac_addr[2],
+	               (fdb+i)->mac_addr[3], (fdb+i)->mac_addr[4], (fdb+i)->mac_addr[5]);
+
+
+		offset += num;
+	}
+
+	fclose(fp);
+}
+
+int machex2macint(char *arg1, char *arg2)
+{
+  int tmp[6];
+
+  if(sscanf(arg1, "%02x%02x%02x%02x%02x%02x", tmp,tmp+1,tmp+2,tmp+3,tmp+4,tmp+5)!=6)
+    return 0;
+
+  arg2[0]=(char) tmp[0];
+  arg2[1]=(char) tmp[1];
+  arg2[2]=(char) tmp[2];
+  arg2[3]=(char) tmp[3];
+  arg2[4]=(char) tmp[4];
+  arg2[5]=(char) tmp[5];
+
+
+  return 1;
+}
+
+void br_cmd_enablemac(struct bridge *br, char *arg0, char *arg1) 
+{
+  char tmp[6];
+
+  if(machex2macint(arg0, tmp))
+  {
+
+    if(br_set_mac_enabled(br, tmp) == 0) 
+    {
+       return;
+    }	
+  }
+  printf("removing mac not successful.\n");
+}
+
+void br_cmd_disablemac(struct bridge *br, char *arg0, char *arg1)
+{
+  char tmp[6];
+
+  if(machex2macint(arg0, tmp))
+  {
+    if(br_set_mac_disabled(br, tmp) == 0) 
+    {
+      return;
+    }
+  }
+  printf("adding mac not successful.\n");
+
+}
+
+void br_cmd_setfilter(struct bridge *br, char *arg0, char *arg1)
+{
+	unsigned char mac = 0xFF, on = 0xFF;
+
+	mac = !strncasecmp( arg0, "src", 3 ) ? 1 : !strncasecmp( arg0, "dest", 4 ) ? 0 : 0xFF;
+	on = !strncasecmp( arg1, "off", 3 ) ? 0 : !strncasecmp( arg1, "on", 2 ) ? 1 : 0xFF;
+
+	br_set_filter( br, mac, on );
+}
+
+void br_cmd_setpolicy(struct bridge *br, char *arg0, char *arg1)
+{
+	unsigned char mac = 0xFF, allow = 0xFF;
+
+	mac = !strncasecmp( arg0, "src", 3 ) ? 1 : !strncasecmp( arg0, "dest", 4 ) ? 0 : 0xFF;
+	allow = !strncasecmp( arg1, "deny", 4 ) ? 0 : !strncasecmp( arg1, "allow", 5 ) ? 1 : 0xFF;
+
+	br_set_policy( br, mac, allow );
+}
+
+void br_cmd_ismacexist(struct bridge *br, char *arg0, char *arg1)
+{
+  char tmp[6];
+  char ex[] = "exist\n";
+  char nex[] = "not exist\n";
+  int fd;
+
+  fd = open("/tmp/macexist", O_RDWR | O_CREAT | O_TRUNC);
+
+  if(fd < 0)
+	  printf("err: Can't get fd\n");
+
+  if(machex2macint(arg0, tmp)) {
+    if( br_set_mac_isexist(br, tmp) == 0) {
+      printf("%s",ex);
+	  write(fd,ex, sizeof(ex));
+    } else {
+  		printf("%s",nex);
+  		write(fd,nex, sizeof(nex));
+	}
+  	close(fd);
+  }
+
+}
+
+
 static struct command commands[] = {
 	{0, 1, "addbr", br_cmd_addbr},
 	{1, 1, "addif", br_cmd_addif},
@@ -317,6 +478,12 @@
 	{1, 0, "showmacs", br_cmd_showmacs},
 	{1, 0, "showstp", br_cmd_showstp},
 	{1, 1, "stp", br_cmd_stp},
+	{1, 0, "showftdb", br_cmd_showdismacs},
+	{1, 1, "ftdbaddmac", br_cmd_disablemac},
+	{1, 1, "ftdbdelmac", br_cmd_enablemac},
+	{1, 2, "setfilter", br_cmd_setfilter},
+	{1, 2, "setpolicy", br_cmd_setpolicy},
+	{1, 1, "ismacexist", br_cmd_ismacexist},
 };
 
 struct command *br_command_lookup(char *cmd)
diff -Nurw bridge-utils/brctl/brctl_disp.c bridge-utils-patched/brctl/brctl_disp.c
--- bridge-utils/brctl/brctl_disp.c	Fri Jun 22 15:59:02 2001
+++ bridge-utils-patched/brctl/brctl_disp.c	Tue Apr 16 14:44:44 2002
@@ -46,7 +46,7 @@
 	printf("\n");
 
 	while (p != NULL) {
-		printf("\t\t\t\t\t\t\t%s\n", if_indextoname(p->ifindex, ifname));
+		printf("\t\t\t\t\t\t\t\t\t%s\n", if_indextoname(p->ifindex, ifname));
 		p = p->next;
 	}
 }
diff -Nurw bridge-utils/libbridge/libbridge.h bridge-utils-patched/libbridge/libbridge.h
--- bridge-utils/libbridge/libbridge.h	Fri Jun 22 15:59:03 2001
+++ bridge-utils-patched/libbridge/libbridge.h	Tue Apr 16 15:27:10 2002
@@ -55,6 +55,10 @@
 	struct timeval tcn_timer_value;
 	struct timeval topology_change_timer_value;
 	struct timeval gc_timer_value;
+	unsigned char flt_src;
+	unsigned char flt_dest;
+	unsigned char flt_src_allow;
+	unsigned char flt_dest_allow;
 };
 
 struct bridge
@@ -76,6 +80,11 @@
 	struct timeval ageing_timer_value;
 };
 
+struct ftdb_entry
+{
+       u_int8_t mac_addr[6];
+};
+
 struct port_info
 {
 	struct bridge_id designated_root;
@@ -124,6 +133,13 @@
 int br_set_port_priority(struct port *p, int port_priority);
 int br_set_path_cost(struct port *p, int path_cost);
 int br_read_fdb(struct bridge *br, struct fdb_entry *fdbs, int offset, int num);
+
+int br_read_ftdb(struct bridge *br, struct ftdb_entry *fdbs, int offset, int num);
+int br_set_mac_disabled(struct bridge *br, char *addr);
+int br_set_mac_enabled(struct bridge *br, char *addr);
+int br_set_filter(struct bridge *br, unsigned char mac, unsigned char onoff);
+int br_set_policy(struct bridge *br, unsigned char mac, unsigned char policy);
+int br_set_mac_isexist(struct bridge *br, char *addr);
 
 /* libc5 combatability */
 char *if_indextoname(unsigned int __ifindex, char *__ifname);
diff -Nurw bridge-utils/libbridge/libbridge_devif.c bridge-utils-patched/libbridge/libbridge_devif.c
--- bridge-utils/libbridge/libbridge_devif.c	Wed Jan 16 07:04:45 2002
+++ bridge-utils-patched/libbridge/libbridge_devif.c	Tue Apr 16 15:29:44 2002
@@ -196,3 +196,68 @@
 
 	return numread;
 }
+
+void __copy_ftdb(struct ftdb_entry *ent, struct __ftdb_entry *f)
+{
+       memcpy(ent->mac_addr, f->mac_addr, 6);
+}
+
+int br_read_ftdb(struct bridge *br, struct ftdb_entry *fdbs, int offset, int num)
+{
+       struct __ftdb_entry f[num];
+       int i;
+       int numread;
+
+       if ((numread = br_device_ioctl(br, BRCTL_GET_DISABLED_MACS,
+                                      (unsigned long)f, num, offset)) < 0)
+               return errno;
+
+       for (i=0;i<numread;i++)
+               __copy_ftdb(fdbs+i, f+i);
+
+       return numread;
+}
+
+
+int br_set_mac_disabled(struct bridge *br, char *addr)
+{
+       if (br_device_ioctl(br, BRCTL_SET_MAC_DISABLED, (ulong) addr,
+                           0, 0) < 0)
+               return errno;
+
+  return 0;
+}
+
+int br_set_mac_isexist(struct bridge *br, char *addr)
+{
+	if(br_device_ioctl(br, BRCTL_IS_MAC_EXIST, (ulong) addr,
+					   0,0) <= 0)
+		return errno;
+	return 0;
+}
+
+int br_set_mac_enabled(struct bridge *br, char *addr)
+{
+	if (br_device_ioctl(br, BRCTL_SET_MAC_ENABLED, (ulong) addr,
+                           0, 0) < 0)
+        return errno;
+
+  	return 0;
+}
+
+int br_set_filter(struct bridge *br, unsigned char mac, unsigned char onoff)
+{
+	if (br_device_ioctl(br, BRCTL_SET_MAC_FILTER, mac, onoff, 0) < 0)
+		return errno;
+
+	return 0;
+}
+
+int br_set_policy(struct bridge *br, unsigned char mac, unsigned char policy)
+{
+	if (br_device_ioctl(br, BRCTL_SET_MAC_FLT_POLICY, mac, policy, 0) < 0)
+		return errno;
+
+	return 0;
+}
+
diff -Nurw bridge-utils/libbridge/libbridge_init.c bridge-utils-patched/libbridge/libbridge_init.c
--- bridge-utils/libbridge/libbridge_init.c	Fri Jun 22 15:59:03 2001
+++ bridge-utils-patched/libbridge/libbridge_init.c	Tue Apr 16 14:44:44 2002
@@ -51,6 +51,10 @@
 	__jiffies_to_tv(&info->topology_change_timer_value,
 			i->topology_change_timer_value);
 	__jiffies_to_tv(&info->gc_timer_value, i->gc_timer_value);
+	info->flt_src = i->flt_src;
+	info->flt_dest = i->flt_dest;
+	info->flt_src_allow = i->flt_src_allow;
+	info->flt_dest_allow = i->flt_dest_allow;
 }
 
 static void __port_info_copy(struct port_info *info, struct __port_info *i)