iptables -F FORWARD
iptables -A FORWARD -m mac --mac-source xx:xx:xx:xx:xx:xx -j ACCEPT
iptables -A FORWARD -j DROP