bridge on debian with shorewall

man bridge-utils-interfaces

bridge config
/etc/network/interfaces

iface br0 inet static
    bridge_ports eth1 tap0
    address 10.10.10.10
    netmask 255.0.0.0

routeback option for br0
/etc/shorewall/interfaces

#ZONE   INTERFACE       BROADCAST       OPTIONS
loc     br0            detect          routeback

User tags

fio fido7 ha iops quagga lstat iptables NFS php leap second bind vrrp rtsp arch ardour lenny squeeze munin PXE shorewall sysctl sysrq cfq xfs apt dhclient SSD regex glusterfs chroot sublime idmapd initrd usb lts tool dovecot sg noop etch debootstrap pvmove exim4 alsa ubuntu htop cluster xen lxc replication performance swap CentOS gre ipmitool zRam scsi AMD taskset oprofile nfs4 iostat route ip StorMan .htaccess elliptics MODx gdb storage chromium corosync docker backtrace cpu usage arp netfilter cache SuperMicro video RT centos 7 Adaptec core dump cpu qcow2 source LSI Areca sysctl.conf 3Ware PTR slab glxinfo tin mdadm iowait ansible rsync find soa tar tiger opcontrol LVM MegaRAID wget java bug debian xhost cgroups sftp /etc/network/interfaces shellshock flash ssh numa pam tftp jackd virsh parallel sysfs cpanm APU kernel puppet in-addr.arpa language encrypt arping gpg limit_conn hotplug ddos virtualbox DRBD mkfs vlan bacula CPAN pulseaudio top equalizer iSCSI search dpkg grub rkhunter gtk ipmi drupal wordpress raid nvidia build HTTPS freedos openvpn X forwarding mount proxy asoundrc vrrpd opreport alien radeon su Salt deb nginx ulimit rtl8723be mysql dhcp SpamAssassin perl conntrack lubuntu boot git profiling KVM firefox bash HDFS bridge SYN backup dns OpenStack tzdata bscan Swift qemu keyboard newgrp virt-install mariadb rpm OpenSSL apache sysresccd vim security erase xargs dstat ps vtysh hdparm docker-compose perlbrew raid5 fail2ban graylog2 tun youtube pacemaker bonding routing groups exim