bridged and switched traffic not firewalled for some reason.
If you want filter bridged traff, enable it by command
/interface bridge settings set use-ip-firewall=yes
And for switched packets the only way to filter - by using switch rules
/interface ethernet switch rule