Page 1 of 1
Can routerOS block IPv6 completely?
Posted: Thu Dec 19, 2019 8:37 pm
by mkonsultor
My site is probed by IPv6 traffic, but I use only IPv4. Looking at the firewall to drop IPv6 packets, but can't find a way to designate all IPv6 on the FORWARD chain. What am I missing?
routerOS 6.43.11 (about to upgrade to current).
Re: Can routerOS block IPv6 completely?
Posted: Thu Dec 19, 2019 8:42 pm
by mkx
If you have /ipv6 menu tree, try
/ipv6 firewall filter
add chain=forward action=drop place-before=0
Or, alternatively, if you don't want to run IPv6 at all, disable ipv6 package.
Re: Can routerOS block IPv6 completely?
Posted: Thu Dec 19, 2019 9:00 pm
by mkonsultor
Thanks, mkx, for the quick reply. The procedure is at the command line, right? Not available in winbox or the webconfig?
Re: Can routerOS block IPv6 completely?
Posted: Thu Dec 19, 2019 9:11 pm
by mkx
The structure in GUI is the same ... IPv6 -> Firewall -> Filter Rules -> Add New ... and only select and configure needed fields, don't select (open) the rest ... and if there are other rules, be sure to drag the new rule to the top of the list, rules are processed from top to bottom and first matching stops further processing