In your drop rules you must not indicate the bridge interface BRIDGE00 but its components (ETH00,ETH01). A better solution is to not select any interface at all. In this case any p2p packet is not forwarded regardless of the input and output interfaces.
Regards
Fulvio
