This is an old revision of the document!
The easiest way to achieve Wireless mac filtering is to use the basic/wireless filter. There are cases though where you would need/prefer to block mac addresses in a script, this can be for easier management (large number of devices) or to ba able to schedule the filtering on/off as needed.
Given a mac address you want to control say aa:bb:cc:dd:ee:ff
you can
# Block
/usr/sbin/ebtables -A FORWARD -d aa:bb:cc:dd:ee:ff -j DROP
# Unblock
/usr/sbin/ebtables -D FORWARD -d aa:bb:cc:dd:ee:ff -j DROP
# Flush (unblock all the defined references at once)
/usr/sbin/ebtables -F