iptables -I FORWARD -m mac --mac-source c0:64:c6:cc:3e:a0 -j DROP

上面这条命令测试过是可行,禁止这个mac地址上网,马上禁止马上生效

iptables -I FORWARD -m mac --mac-source c0:64:c6:cc:3e:a0 -j ACCEPT

解除禁止