What protections do MikroTik routers/switches (including SwOS) have against a MAC flood filling the CAM table, and then broadcasting packets out all ports?

I would like to setup both switches (SwOS) and routers to simply drop packets not addressed in the CAM table, instead of broadcasting them - what's the most bombproof way of doing this?