I'm trying to to filter out MAC-addresses from using my Astaro as a gateway to the internet. [I know how to do this with ip's ] How can do this with MAC's?
As far as I know, it's not engineered to do that. You can have the DHCP server make reservations for MACs, but that won't be of much help.
Seeing as how with a software adjustment anybody can change their MAC address, this will only offer a minor additional security control (if that's what you're trying to achieve), and most firewall vendors feel that administrators will not want to hassle with it.
But maybe there's a practical consideration that I am unaware of as to why you want to do it?
If you desperately needed such functionality, you could make an Astaro daemon software extension that periodically reads from a configuration file workstation names and MAC address mappings, used arp to determine the workstations' current IP addresses, then updated network definitions in Astaro for the workstations.
