The easiest way to achieve Wireless mac filtering is to use the basic/wireless filter. There are cases though where you would need/prefer to block mac addresses in a script, this can be for easier management (large number of devices) or to ba able to schedule the filtering on/off as needed.

Given a mac address you want to control say aa:bb:cc:dd:ee:ff you can

# Block
/usr/sbin/ebtables -A FORWARD -d aa:bb:cc:dd:ee:ff -j DROP

# Unblock
/usr/sbin/ebtables -D FORWARD -d aa:bb:cc:dd:ee:ff -j DROP

# Flush (unblock all the defined references at once)
/usr/sbin/ebtables -F