block mac from rc.local

1. /etc/rc.local
2.at line 164
   ###-----------------------------------------------------###
# 封鎖內部某台 MAC
###-----------------------------------------------------###
#$IPTABLES -A FORWARD -p tcp -m mac --mac-source xx:xx:xx:xx:xx:xx -j DROP
# below is 1-1 MAC
#$IPTABLES -A FORWARD -p tcp -m mac --mac-source 00:09:xx:xx:xx:xx-j DROP

3.service rc.local start