I have a linux machine (my workstation). From there I can ping other local machines, let's say 192.168.1.22. Let's say I want to prohibit communication with 192.168.1.22 by it's MAC address. I'm trying a simple rule:
ebtables -I INPUT -s 00:24:1d:c9:0a:27 -j DROP
But still I can ping that host. Is ebtables limited to filtering traffic only on bridge interfaces?