diff --git a/devices/HC5962/diy-part2.sh b/devices/HC5962/diy-part2.sh
index f86a37a..1f09120 100644
--- a/devices/HC5962/diy-part2.sh
+++ b/devices/HC5962/diy-part2.sh
@@ -36,3 +36,6 @@ net.netfilter.nf_conntrack_udp_timeout=60
 net.netfilter.nf_conntrack_udp_timeout_stream=180
 net.netfilter.nf_conntrack_helper=1
 EOF
+
+# disable bridge firewalling
+sed -i 's/=1/=0/g' package/kernel/linux/files/sysctl-br-netfilter.conf
diff --git a/devices/JDC-RE-SP-01B/diy-part2.sh b/devices/JDC-RE-SP-01B/diy-part2.sh
index 45bd14d..5d9ff8d 100644
--- a/devices/JDC-RE-SP-01B/diy-part2.sh
+++ b/devices/JDC-RE-SP-01B/diy-part2.sh
@@ -35,4 +35,7 @@ net.netfilter.nf_conntrack_tcp_timeout_established=7440
 net.netfilter.nf_conntrack_udp_timeout=60
 net.netfilter.nf_conntrack_udp_timeout_stream=180
 net.netfilter.nf_conntrack_helper=1
-EOF
\ No newline at end of file
+EOF
+
+# disable bridge firewalling
+sed -i 's/=1/=0/g' package/kernel/linux/files/sysctl-br-netfilter.conf
diff --git a/devices/K2P/diy-part2.sh b/devices/K2P/diy-part2.sh
index 0037407..b9ebe7b 100644
--- a/devices/K2P/diy-part2.sh
+++ b/devices/K2P/diy-part2.sh
@@ -35,3 +35,6 @@ net.netfilter.nf_conntrack_udp_timeout=60
 net.netfilter.nf_conntrack_udp_timeout_stream=180
 net.netfilter.nf_conntrack_helper=1
 EOF
+
+# disable bridge firewalling
+sed -i 's/=1/=0/g' package/kernel/linux/files/sysctl-br-netfilter.conf