IP6TABLES https://linux.die.net/man/8/ip6tables allows specifying a mask when matching destination address
so we can use


as the mask to represent The pointer is,when I want to match the last 64 bit part ,I can use mask
This is very useful when I have a dynamic IPV6 prefix and want my routeros to allow some device behind firewall to be visited by outside

I can do this easily with IP6TABLES
I can't do it with routeros




Feature support status :
[✓] Linux IP6TABLES (vanilla or not)
[✓] Vyos
[✓] OpenWrt
[x] Routeros

Extended Reading : https://isolated.site/2019/03/26/allowi ... -firewall/