use
add-src-to-address-list - add source address to address list specified by address-list parameter
action in IP/Firewall/Filter http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter
then allow this address-list in IP/Firewall/Filter forward chain
there are no address-list for mac-addresses in ROS