@Jackace 

Hey,

Do the computers in your LAN network obtain IPv4 or IPv6 addresses? If they get IPv4 addresses, SPI firewall is enabled by default, no need to configure anything. But I guess you may use IPv6. If that is the case, they haven't developed firewall function yet based on IPv6 addresses.

@Somnus 

My lan  has both IPv4 and IPv6. IPv4 is unreachable from the Internet because it is behind NAT. IPv6 though my PCs have globally routable IPv6 addresses on them so they are reachable from anywhere on the Internet. I was hoping I could turn on the SPI firewall and block all incoming requests that are not initiated by something on the LAN making a request. Sounds like I'm going to need an actual firewall for this functionality.

@Jackace 

This router can't block WAN access to IPv6 address. You can try blocking ping from WAN, but it seems also base on IPv4 address. I never try to use it to block IPv6 access.

Yeah I figured the IPv6 firewall rules were pretty light or nonexistent. Wondering if those are coming on the r605 or if there are plans for a more full featured gateway router/firewall in the future?