One thing on my todo is support for something like this:
Client----Bridge----DSL-Modem----DSLAM/Internet
Where one uses PPPoE between Client and DSL-Modem.
pf(4) on the Bridge could peek into the PPPoE packets.
As the external interface will be a dynamically assigned address, and
internal addresses probably private addresses, how will that work on a
bridge? Can you NAT on a bridge?
I am also thinking in a WLAN context here, where a wireless interface
operates in true access point/hostap/bridge mode and the other interface is
PPPoE DSL...