1iptables-translate -A INPUT -m mac --mac-source 0a:12:3e:4f:b2:c6 -j DROP 2nft add rule ip filter INPUT ether saddr 0a:12:3e:4f:b2:c6 counter drop 3 4iptables-translate -A INPUT -p tcp --dport 80 -m mac --mac-source 0a:12:3e:4f:b2:c6 -j ACCEPT 5nft add rule ip filter INPUT tcp dport 80 ether saddr 0a:12:3e:4f:b2:c6 counter accept 6