block client by mac address

how to block pppoe client by mac address?
if i use this rule it drops all clients
chain=forward action=drop src-mac-address=!00:1A:F2:EA:86:50

Do you want to drop everysingle mac address that is not 00:1A:F2:EA:86:50 ?? which is what src-mac-address=!00:1A:F2:EA:86:50 means

Are you putting that rule in the filter tab of IP Firewall or bridge??

the filter tab in BRIDGE options?? there is a filter you can use layer2, you just have to add the physical interface as a port of the bridge and apply a filter rule to it…there is the src-mac-address option…

Do you want to drop everysingle mac address that is not 00:1A:F2:EA:86:50 ?? which is what src-mac-address=!00:1A:F2:EA:86:50 means

Are you putting that rule in the filter tab of IP Firewall or bridge??

the filter tab in BRIDGE options?? there is a filter you can use layer2, you just have to add the physical interface as a port of the bridge and apply a filter rule to it…there is the src-mac-address option…

00:1A:F2:EA:86:50 this is my client mac address which i want to block
chain=forward action=drop src-mac-address=!00:1A:F2:EA:86:50
i put this rule in firewall filter…
plzzz post pictures…
thanks in advance…

having the ! means block everything but what is written after it. so by doing

chain=forward action=drop src-mac-address=!00:1A:F2:EA:86:50

you are blocking all the clients except the one with mac 00:1A:F2:EA:86:50