It is a security measure taken to protect your network. SO your router is configured to accept only certain mac addresses. SO even if the ip address is hijacked, when it is translated, it would not match the MAC address and so it is rejected and blocked