This read-write integer controls whether the bridge acts as a firewall by blocking routable unicast traffic, meaningful only when the device both bridges and routes. When set to firewall (1), the bridge discards unicast packets for protocols that are being routed to prevent loops and duplicate forwarding. For example, setting this to 1 prevents IPv4 unicast traffic from bridging while routing processes it, reducing layer 2-3 conflicts.