Mikrotik IPv6 Default Firewall Rules

Dienstag, 9. Juli 2019 18:18

Hier ein einfacher Vorschlag für IPv6-Firewall-Regeln für Mikrotik Router, die als CPE eingesetzt werden.

/ipv6 firewall filter
add chain=input protocol=icmpv6
add chain=input connection-state=established,related
add chain=input dst-port=546 in-interface=wan protocol=udp src-port=547
add action=drop chain=input connection-state=invalid
add action=drop chain=input connection-state=new in-interface=ether1-wan
add chain=forward protocol=icmpv6
add chain=forward connection-state=established,related
add chain=forward connection-state=new in-interface=!wan
add action=drop chain=forward connection-state=invalid
add action=drop chain=forward connection-state=new in-interface=wan

Thema: Mikrotik | Kommentare (3) | Autor: Dennis Körner