legacy0 wrote:
http://kb.guru-corner.com/question.php?ID=298
Due to the way Edge Router does firewalling on a bridge you must firewall on the br and its best to do that on in. You should use the source MAC because when you make a rule thats destination port 80 without that is both LAN to WAN and WAN to LAN.
That reference is for a SonicWall and has nothing to do with an EdgeRouter. Why would you think that is relevant here?