I had this issue in v7.1.1 (stable). Maybe this will help someone else. I set up a rule in the Mangle table to mark packets in the prerouting chain for new connections coming from Global Addresses on the LAN (using an address list dynamically updated when DHCPv6-Client renews) and then excluding tho...