The easiest way to perform Wireless MAC address filtering is to use the controls in FreshTomato's Wireless Filter menu. However, there are occasions when you need/prefer to block MAC addresses in a script. Using a script has two main advantages. First, it would be tedious and time-consuming to enter all the data for a large number of network devices into the Wireless Filter menu. A solution using scripts can be easier to manage when there are larger numbers of network devices. Second, it allows you to schedule filtering on or off as needed with greater ease.

Given a MAC address whose access you wish to control, for example: aa:bb:cc:dd:ee:ff

You can perform the following functions on it:

# Block
/usr/sbin/ebtables -A FORWARD -d aa:bb:cc:dd:ee:ff -j DROP

# Unblock
/usr/sbin/ebtables -D FORWARD -d aa:bb:cc:dd:ee:ff -j DROP

Or even:

# Flush (unblock all the defined references at once)
/usr/sbin/ebtables -F