Below is a basic IPV6 firewall fillter for your Mikrotik CPE devices.  This is a good start for customer-facing CPE.   /ipv6 firewall filter add chain=forward comment=”allow forwarding established, related” connection state=established,related add chain=forward comment=”allow forward lan->wan” in-interface=lan out-interface=wan add chain=forward comment=”allow ICMPv6 forwarding” in-interface=wan protocol=icmpv6 add action=reject chain=forward comment=”reject every other forwarding request” reject-with=icmp-port-unreachable … Continue reading Basic IPV6 Mikrotik Firewall