Basic Firewall Rule for IPv6 Guest Network

[guest34985]

Hi everyone,

for my existing Guest Network I have got a firewall rule in place that basically drops all connection to private addresses (RFC1918) as a destination after allowing DNS and NTP.

Now if I wanted to have IPv6 in this Guest Network and grant guests access to the Internet but no local access, what would such a rule look like?

Thanks in advance!

[Patrick M. Hausen]

Deny source:guest-network destination:all-other-local-networks
Allow source:guest-network destination:any