I know my way around RouterOS when it comes to IPv4. But as for most of us, IPv6 is new territory. And I know this should be an easy question for anyone who knows RouterOS... I have come from a 12 hour shift, so, please give me a hand?

So I have given a router a /56 prefix. Everything is set up, works as expected, even DNS goes over IPv6. But now I want to protect the hosts behind the router.
So, my idea is to make firewall rules that allow everything on the /56 prefix to open up new connections towards the outside. But in the reverse direction, the outside can only enter trough already opened connection?

How do I achieve that?

Is this an OKayish IPv6 firewall?
essay writer

Any tips?

You have posted this in the script section on the forum so you may not get as many reply as you like.
RB has a set of default rules for ipv6 that works fine.

I have fully built IPv4 and IPv6 firewall with IETF spec in mind + CPU optimisation.

Check here: viewtopic.php?f=2&t=172360&p=842544#p842544
And here: https://www.reddit.com/r/mikrotik/comme ... rent_ietf/