Add 6to4 scripts

Author: Disassembler0

6to4/6to4-basic-firewall.rsc

@@ -0,0 +1,16 @@
+/ipv6 firewall filter
+
+# INPUT
+add chain=input in-interface=6to4-tunnel1 action=jump jump-target=wan-to-mkt comment="Jump to wan-to-mkt rules"
+add chain=wan-to-mkt connection-state=established action=accept comment="Allow established connections"
+add chain=wan-to-mkt connection-state=related action=accept comment="Allow related connections"
+add chain=wan-to-mkt connection-state=invalid action=drop comment="Drop invalid connections"
+add chain=wan-to-mkt protocol=icmpv6 action=accept comment="Accept ICMP"
+add chain=wan-to-mkt action=drop log=yes log-prefix="6to4 INPUT:" comment="Log and drop everyting else"
+
+# FORWARD
+add chain=forward in-interface=6to4-tunnel1 action=jump jump-target=wan-to-lan comment="Jump to wan-to-lan rules"
+add chain=wan-to-lan connection-state=established action=accept comment="Allow established connections"
+add chain=wan-to-lan connection-state=related action=accept comment="Allow related connections"
+add chain=wan-to-lan connection-state=invalid action=drop comment="Drop invalid connections"
+add chain=wan-to-lan action=drop log=yes log-prefix="6to4 FORWARD:" comment="Log and drop everyting else"

6to4/6to4-setup.rsc

@@ -0,0 +1,7 @@
+/interface 6to4
+add name=6to4-tunnel1 local-address=123.45.67.89 remote-address=192.88.99.1 disabled=no
+/ipv6 address
+add address=2002:7b2d:4359::1/48 interface=6to4-tunnel1 advertise=no
+add address=2002:7b2d:4359:1::1/64 interface=bridge1
+/ipv6 route
+add distance=1 dst-address=2000::/3 gateway=6to4-tunnel1