The problem in my case was that the IPv6 firewall in the DIR655 did not have a default allow outbound rule (unlike any router's firewall I have ever seen).
m0n0wall also does not have a default "allow outbound to any" rule for IPv6 internal interfaces.
