Bridged network interfaces + firewall question

[Valhalla]

I'm running WinXP as a guest OS inside of qemu. In order to allow it to connect to the internet, I have bridged eth0 and tap0, into br0. If I want to firewall both the Guest and Host, do I firewall eth0, br0, or does it not matter?
_________________
--Quote of the Month--
"And god saw that the CG artists life was too easy, so he created Skinning and UV unwrapping."
Oh My , look at all these poor Unanswered Posts