also disable forwarding on br-private