Hi all,
I am getting IPv6 as my WAN address from my ISP.
My HAPac is with the default settings.
Is the default firewall rules are good for WAN IPv6 as wall?
Thanks
Check if there are any filter rules for IPv6 firwall at all: /ipv6 firewall filter print …
The catch-22 is the following: with curent ROS ipv6 package is not installed and enabled by default. When user later installs/enables it, the default settings are not set … one would have to perform “reset with defaults” after enabling the package … but that’s usually not done because at that point router is already configured according to wishes and resetting config would mean doing everything once (or twice) again …
You can enter default rules manually … print default config using /system default-configuration print, scroll down to the ipv6 section, then copy-paste config commands back to router.
Other than all this fuss to get default IPv6 firewall filter rules configured … they are good starting point to add some inbound allows (analogue to DST-NAT rules for IPv4) if needed.
Thanks for the replay @mkx
I will check it out.