No out LAN if not on allowed MAC ACL

RouterOS Beginner Basics
2

I’m not aware of any MAC list in RouterOS, but you can do something like this:

/ip firewall filter
add action=jump chain=forward in-interface=<LAN> out-interface=<WAN> jump-target=outgoing
add action=accept chain=outgoing src-mac-address=00:00:00:00:00:01
add action=accept chain=outgoing src-mac-address=00:00:00:00:00:02
add action=reject chain=outgoing reject-with=icmp-admin-prohibited