There's nothing to stop you from filtering on the bridge. It works well for devices that have a need for same-subnet access but can't be filtered on the host (but there are plenty of other ways of doing so). A dumb bridge wouldn't gain you anything, of course.
I have never attempted such a thing, where can I get more information and equipment to do this?
