Hi!

1) IPv6 firewall rules are limited to /64 as I can see; why not /128 make this or am I missing something here?
2) How to announce dns-servers? Since there is no DHCP6 we cannot use that path, but how about RA?

/Daniel

^2nd'd

2) dont you just give your dns servers a special local link address thats well known and they are used automatically?

Name server addresses in RAs isn't standardised yet, but there's a draft RFC for it:

http://www.faqs.org/rfcs/rfc5006.html