This is NOT working add action=drop chain=forward comment="IPv6 WAN to LAN" in-interface=WAN out-interface=LAN add action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=established,related,untracked This is working add action=accept ...