diff --git a/cf/conf/config.xml b/cf/conf/config.xml
index aa4267e29c..0d5fe91cf3 100644
--- a/cf/conf/config.xml
+++ b/cf/conf/config.xml
@@ -75,6 +75,16 @@
 			<tunable>net.link.bridge.pfil_onlyip</tunable>
 			<value>0</value>
 		</item>
+                <item>
+                        <desc>Set to 0 to disable filtering on the incoming and outgoing member interfaces.</desc>
+                        <tunable>net.link.bridge.pfil_member</tunable>
+                        <value>1</value>
+                </item>
+                <item>
+                        <desc>Set to 1 to enable filtering on the bridge interface</desc>
+                        <tunable>net.link.bridge.pfil_bridge</tunable>
+                        <value>0</value>
+                </item>
 		<item>
 			<desc>Allow unprivileged access to tap(4) device nodes</desc>
 			<tunable>net.link.tap.user_open</tunable>
diff --git a/conf.default/config.xml b/conf.default/config.xml
index aa4267e29c..0d5fe91cf3 100644
--- a/conf.default/config.xml
+++ b/conf.default/config.xml
@@ -75,6 +75,16 @@
 			<tunable>net.link.bridge.pfil_onlyip</tunable>
 			<value>0</value>
 		</item>
+                <item>
+                        <desc>Set to 0 to disable filtering on the incoming and outgoing member interfaces.</desc>
+                        <tunable>net.link.bridge.pfil_member</tunable>
+                        <value>1</value>
+                </item>
+                <item>
+                        <desc>Set to 1 to enable filtering on the bridge interface</desc>
+                        <tunable>net.link.bridge.pfil_bridge</tunable>
+                        <value>0</value>
+                </item>
 		<item>
 			<desc>Allow unprivileged access to tap(4) device nodes</desc>
 			<tunable>net.link.tap.user_open</tunable>