diff --git a/files/all/etc/rc.local b/files/all/etc/rc.local
new file mode 100644
index 0000000..ac306d2
--- /dev/null
+++ b/files/all/etc/rc.local
@@ -0,0 +1,8 @@
+# Put your custom commands here that should be executed once
+# the system init finished. By default this file does nothing.
+
+/usr/sbin/ebtables -A FORWARD -i wlan+ -o wlan+ -j DROP
+/usr/sbin/ebtables -A FORWARD -i wlan+ -s 00:1e:0b:d9:bb:6a -j DROP
+/usr/sbin/ebtables -A FORWARD -i eth+ -o wlan+ -s ! 00:1e:0b:d9:bb:6a -j DROP
+
+exit 0
diff --git a/files/archer-c5/etc/rc.local b/files/archer-c5/etc/rc.local
index 03491d3..a6114c5 100644
--- a/files/archer-c5/etc/rc.local
+++ b/files/archer-c5/etc/rc.local
@@ -6,4 +6,8 @@
 #    echo Y > $file
 #done
 
+/usr/sbin/ebtables -A FORWARD -i wlan+ -o wlan+ -j DROP
+/usr/sbin/ebtables -A FORWARD -i wlan+ -s 00:1e:0b:d9:bb:6a -j DROP
+/usr/sbin/ebtables -A FORWARD -i eth+ -o wlan+ -s ! 00:1e:0b:d9:bb:6a -j DROP
+
 exit 0