I am running on Fedora 17 with the latest ebtables and have been trying to setup a transparent bridge - using the following script, I send a ping through the bridged host and only see the requests on the bridge (among other traffic from eth0), BUT, arps and arp replies are making it through.

My host is setup - Client 192.168.1.10 <-- eth0 --> eth2 192.168.1.20

Ethernet script:

#!/bin/sh
brctl addbr br0;
brctl stp br0 on;
brctl addif br0 eth0;
brctl addif br0 eth2;
(ifdown eth0 1>/dev/null 2>&1;);
(ifdown eth2 1>/dev/null 2>&1;);
ifconfig eth0 0.0.0.0 up;
ifconfig eth2 0.0.0.0 up;
echo "1" > /proc/sys/net/ipv4/ip_forward;   
ebtables -P INPUT DROP
ebtables -P FORWARD DROP
ebtables -P OUTPUT DROP
ebtables -A FORWARD -p ipv4 -j ACCEPT
ebtables -A FORWARD -p arp -j ACCEPT

Any assistance would be great!