Can I filter on L2?

RouterOS General
2

Most likely switch ACL rules.

Check this thread for more background info.
http://forum.mikrotik.com/t/bridge-filter-rules/172924/1