filtering BPDU(STP) from bridged vlans

Hi All,

What is the correct way of filtering STP (BPDU) packets from a single
bridge that contains vlans, equivalent to cisco's:
 spanning-tree rootguard
 spanning-tree bpdufilter enable


I have many bridge interfaces, each with two vlans, for example

eth0.400 and eth1.500 are part of br600, and I want to prevent all STP
packets that arrive on eth1.500 from being passed to eth0.400.

I have other br interfaces that I don't want to be affected.

K