1iptables-translate -A INPUT -m mac --mac-source 0a:12:3e:4f:b2:c6 -j DROP 2nft 'add rule ip filter INPUT ether saddr 0a:12:3e:4f:b2:c6 counter drop' 3 4iptables-translate -A INPUT -p tcp --dport 80 -m mac --mac-source 0a:12:3e:4f:b2:c6 -j ACCEPT 5nft 'add rule ip filter INPUT tcp dport 80 ether saddr 0a:12:3e:4f:b2:c6 counter accept' 6