I've been dealing with ebtables recently. To test if it works at all I set policy to drop on chains: input, output and forward for one of the interfaces. However, it doesn't work as I can ping a host connected to that interface. I use Debian which may be a reason of the problem since I needed to install some packages that should be "built in" (for example syslog). Maybe I need to run some additional configuration for ebtables.
I tried also iptables which work properly. However, for my task I need to use ebtables (MAC NAT).
Do you have any suggestions?