Community discussions

MikroTik App
 
mkonsultor
just joined
Topic Author
Posts: 12
Joined: Sun Oct 20, 2019 6:37 pm

Can routerOS block IPv6 completely?

Thu Dec 19, 2019 8:37 pm

My site is probed by IPv6 traffic, but I use only IPv4. Looking at the firewall to drop IPv6 packets, but can't find a way to designate all IPv6 on the FORWARD chain. What am I missing?
routerOS 6.43.11 (about to upgrade to current).
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 13124
Joined: Thu Mar 03, 2016 10:23 pm

Re: Can routerOS block IPv6 completely?

Thu Dec 19, 2019 8:42 pm

If you have /ipv6 menu tree, try
/ipv6 firewall filter 
add chain=forward action=drop place-before=0

Or, alternatively, if you don't want to run IPv6 at all, disable ipv6 package.
 
mkonsultor
just joined
Topic Author
Posts: 12
Joined: Sun Oct 20, 2019 6:37 pm

Re: Can routerOS block IPv6 completely?

Thu Dec 19, 2019 9:00 pm

Thanks, mkx, for the quick reply. The procedure is at the command line, right? Not available in winbox or the webconfig?
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 13124
Joined: Thu Mar 03, 2016 10:23 pm

Re: Can routerOS block IPv6 completely?

Thu Dec 19, 2019 9:11 pm

The structure in GUI is the same ... IPv6 -> Firewall -> Filter Rules -> Add New ... and only select and configure needed fields, don't select (open) the rest ... and if there are other rules, be sure to drag the new rule to the top of the list, rules are processed from top to bottom and first matching stops further processing