[OpenWrt Wiki] fw3 IPv6 configuration examples
openwrt.org › docs › guide-userMake sure that net.ipv6.conf.all.forwarding=1 is enabled, you can run sysctl net.ipv6.conf.all.forwarding to confirm the value set. (This is likely already enabled by default on newer OpenWrt builds). Assuming your tunnel interface is called wan6, add the following sections to /etc/config/firewall to create a new zone wan6.
[OpenWrt Wiki] IPv6
https://openwrt.org/docs/guide-user/network/ipv627.11.2021 · How to use OpenWrt behind a Freebox with IPv6 delegation. IPv6 configuration. IPv6 extras. IPv6 multicast. IPv6 on L2TP softwire. IPv6 with Hurricane Electric. IPv6 with Hurricane Electric using LuCI. NAT6 and IPv6 masquerading. WIDE-DHCPv6 client configuration.
OpenWRT IPv6 firewall
openwrt-devel.openwrt.narkive.com › 6wpWOvyrPossibly there were discussions about ipv6 and firewall settings, end-to-end on home routers ("CPE") on NANOG or other NOG mailing lists AFAICT OpenWrt does not have some of these "sane" defaults enabled to quote 6092: "IPsec transport and tunnel modes are explicitly secured by definition, so
[OpenWrt Wiki] IPv6 configuration
openwrt.org › docs › guide-userNov 27, 2021 · The default firmware provides full IPv6 support with a DHCPv6 client (odhcp6c), an RA & DHCPv6 Server and a IPv6 firewall (ip6tables). Also, the default installation of the web interface includes the package luci-proto-ipv6, required to configure IPv6 from the luci web interface.