ip firewall filter
add action=drop chain=forward in-interface=ether2 out-interface=!ether1
add action=drop chain=forward in-interface=ether3 out-interface=!ether1
The out-of-box config would've been adequate
So is this a fix in 6.32rc5? I didn't find a place to download 6.32rc5. I triedCHR running on XEN