The easiest way to perform Wireless MAC address filtering is to use the controls in FreshTomato's Wireless Filter menu. However, there are occasions when you need/prefer to block MAC addresses in a script. Using a script has two main advantages. First, it would be tedious and time-consuming to enter all the data for a large number of network devices into the Wireless Filter menu. A scripted solution can be easier to manage when there are large numbers of network devices. Second, a script more easily allows you to schedule filtering on or off, as needed.

Given a MAC address whose access you wish to control, for example:

aa:bb:cc:dd:ee:ff

You can perform the following functions on it:

• Block
  

  /usr/sbin/ebtables -A FORWARD -d aa:bb:cc:dd:ee:ff -j DROP

• Unblock
  

  /usr/sbin/ebtables -D FORWARD -d aa:bb:cc:dd:ee:ff -j DROP

Or even…

• Flush (unblock all the defined references at once)
  

  /usr/sbin/ebtables -F