Recently, I am configurating ebtables on one network structure, as following description :

|----------|
|FIREWALL |
|----------|
|\
|
| eth0
|--------| A normal server works as bridge. Interface: br0, port: eth0, eth1
| serverA | IP: 1.1.1.3
|--------|
|\ eth1
|
|
|--------|
| switch | Cisco switch WS-C3560X works as a two-level switch
|--------|
/ \
/ \
/ \
|---------| |-------------|
| serverB | | serverC |
|---------| |-------------|
IP: 1.1.1.1 IP: 1.1.1.2

Explanations:
1. serverA works as a bridge, which has br0. Interface: eth0, eth1. Nothing is configurated except that;
2. serverB and serverC(maybe more) is two(maybe more) normal servers, behind a cisco switch;
3. OS of serverA is CentOS release 6.4 (Final).
Now I have the following needs on serverA(IP: 1.1.1.3):
1. I want to do flow control(traffic control) on IP 1.1.1.1 and 1.1.1.2;
2. I want to forbid some IP if it is illegal or it takes two much bandwidth.

Does it work by using ebtables? How?
If doesn't, what's my other option?

I 've worked on it for one week and done lots of search on the Internet, nothing help.
I'd appreciate for any suggestion even though an idea.

you will have more problems that just that
6.4 is UNSUPPORTED and so is 6.5

install the Current CentOS 6.6
or upgrade this 6.4 install to 6.6

6.4 is missing the last year and then some of SECURITY updates and fixes

Thanks for John VV.
Does CentOS 6.6 has the function that support tc(traffic control) on the bridge?
The problem which confuses me is if bridge can do tc with ebtables.