Proper isolation of a Linux bridge

On Linux, a network bridge without any IP address configured will still process IP packets. How to disable such a feature?