The manpage states that fwd rules (like for transparent proxying) will not match bridged packets. Will they ever, or is there some fundamental reason they can't?