Sounds like it's working as expected to me, if you're full tunnelling to Surfshark VPN, you'll be able to bypass any restrictions set on your upstream MX. This is due to all your traffic being encrypted between the client and Surfshark which the MX cannot inspect.   Re: IPv6, as per Surfshark's own KB, they don't support. ... View more