The easiest way to perform Wireless MAC address filtering is to use the controls in FreshTomato's Wireless Filter menu. However, there are occasions when you need/prefer to block MAC addresses in a script. Using a script has two main advantages. First, it would be tedious and time-consuming to enter all the data for a large number of network devices into the Wireless Filter menu. A scripted solution can be easier to manage when there are large numbers of network devices. Second, a script more easily allows you to schedule filtering on or off, as needed.
Given a MAC address whose access you wish to control, for example:
You can perform the following functions on it:
/usr/sbin/ebtables -A FORWARD -d aa:bb:cc:dd:ee:ff -j DROP
/usr/sbin/ebtables -D FORWARD -d aa:bb:cc:dd:ee:ff -j DROP
# Flush (unblock all the defined references at once)