hello. I would like to forward port 80 for example, but to deny from all mac address except in my list. I know how to forward port and in nat rules ==> advanced there is s source mac adress, but how can i enter there more than one?

is this possible?

You cannot enter more than one. You can jump into a chain that has one rule per MAC address with an action of drop. Any other packet will fall through to the bottom and return to the calling rule.

Thanks for your reply
will it be correct if i create new nat rule with the same dst and source ip and port for each mac address?

Sorry, I read that wrong - I thought you wanted to deny specific MAC addresses. Yes, you'll have to make one NAT rule per MAC address.

also to use mac address based rules the devices all have to be on the same layer 2 network