Is there any possible way to determine within a firewall chain the physical interface a packet entered IF that physical interface belongs to a bridge?
So far as I can tell by experimentation, this is impossible. The "in-interface" only matches the bridge interface.
Any ideas? Pointers?