Static hostname: hst-fr Icon name: computer-vm Chassis: vm 🖴 Machine ID: 670145ea93d8dd9a9e397078c61e2718 Boot ID: 0f817d48f69f4f53b145fe9a2ad92ba4 Product UUID: d660a663-6560-4ff5-835a-5548e1c010bb Virtualization: kvm Operating System: Debian GNU/Linux 13 (trixie) Kernel: Linux 6.12.95+deb13-cloud-amd64 Architecture: x86-64 Hardware Vendor: QEMU Hardware Model: Standard PC _i440FX + PIIX, 1996_ Firmware Version: rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org Firmware Date: Tue 2014-04-01 Firmware Age: 12y 5month 1w 3d Date : 2026-09-10 13:05:11 CEST 13:05:11 up 62 days, 21:15, 2 users, load average: 0.32, 0.22, 0.18 ● firewall-ipv6.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall-ipv6; generated) Active: active (exited) since Wed 2026-09-09 22:05:12 CEST; 14h ago Invocation: 650520e6533f41dd8e0e4b4f45fe92b6 Docs: man:systemd-sysv-generator(8) Mem peak: 4.6M CPU: 811ms Sep 09 22:05:11 hst-fr firewall-ipv6[1628759]: |\ Sep 09 22:05:11 hst-fr firewall-ipv6[1628759]: | +--> 2a02:4780:28:5295:0000:0000:0000:0001 : ACCEPT Sep 09 22:05:11 hst-fr firewall-ipv6[1628759]: | +--> fee5::1 : ACCEPT Sep 09 22:05:11 hst-fr firewall-ipv6[1628759]: | | Sep 09 22:05:11 hst-fr firewall-ipv6[1628759]: | + IPv6 - Addrs WAN : [OK] Sep 09 22:05:11 hst-fr firewall-ipv6[1628759]: | Sep 09 22:05:12 hst-fr firewall-ipv6[1628759]: + GENERIQUE : [OK] Sep 09 22:05:12 hst-fr firewall-ipv6[1628759]: + LOGGING : [OK] Sep 09 22:05:12 hst-fr firewall-ipv6[1628759]: + POLICY DROP : [OK] Sep 09 22:05:12 hst-fr systemd[1]: Started firewall-ipv6.service - LSB: Start daemon at boot time. Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 466 29824 DROP ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 128 limit: above 1/sec burst 1 mode srcip 7762 767K aICMPs ipv6-icmp -- * * ::/0 ::/0 2 160 DROP tcp -- eth0 * ::/0 ::/0 tcp flags:!0x17/0x02 state NEW 35927 2858K Syn-FLOOD tcp -- eth0 * ::/0 ::/0 tcp flags:0x17/0x02 0 0 DROP tcp -- * * ::/0 ::/0 tcp flags:0x3F/0x3F 0 0 DROP tcp -- * * ::/0 ::/0 tcp flags:0x3F/0x00 0 0 LOG all -- * * ::/0 ::/0 rt type:0 segslefts:0:2 LOG flags 0 level 4 prefix "IPv6-RH0-ATTACK-2-HOPS: " 0 0 DROP all -- * * ::/0 ::/0 rt type:0 segslefts:0:2 0-addrs ::1,::2 0-not-strict 0 0 LOG all -- * * ::/0 ::/0 rt type:0 segsleft:0 LOG flags 0 level 4 prefix "IPv6-RH0-ATTACK: " 0 0 DROP all -- * * ::/0 ::/0 rt type:0 segsleft:0 0 0 CHECK_GRE tcp -- * * ::/0 ::/0 tcp dpt:47 state NEW 0 0 CHECK_GRE udp -- * * ::/0 ::/0 udp dpt:47 state NEW 1 60 DROP tcp -- * * ::/0 ::/0 tcp dpt:81 0 0 DROP udp -- * * ::/0 ::/0 udp dpt:81 20440 34M ACCEPT all -- lo * ::/0 ::/0 0 0 ACCEPT all -- * * ::/0 ff00::/8 0 0 ACCEPT tcp -- * * 2607:5300:60:9300::/56 ::/0 tcp dpt:22 0 0 ACCEPT tcp -- * * fc00::/8 ::/0 tcp dpt:22 1286 119K ACCEPT tcp -- * * fec0::/10 ::/0 tcp dpt:22 4 288 tcp -- * * ::/0 ::/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 0 0 DROP tcp -- * * ::/0 ::/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 15 2492 ACCEPT tcp -- * * ::/0 ::/0 tcp dpt:22 0 0 ACCEPT tcp -- * * 2607:5300:60:9300::/56 ::/0 tcp dpt:873 0 0 ACCEPT udp -- * * 2607:5300:60:9300::/56 ::/0 udp dpt:873 0 0 ACCEPT tcp -- * * fc00::/8 ::/0 tcp dpt:873 0 0 ACCEPT udp -- * * fc00::/8 ::/0 udp dpt:873 0 0 ACCEPT tcp -- * * fec0::/10 ::/0 tcp dpt:873 0 0 ACCEPT udp -- * * fec0::/10 ::/0 udp dpt:873 0 0 ACCEPT tcp -- * * ::/0 ::/0 tcp dpt:514 0 0 ACCEPT tcp -- * * ::/0 ::/0 tcp dpt:4949 0 0 ACCEPT tcp -- * * ::/0 ::/0 tcp dpt:5201 2 156 ACCEPT udp -- * * ::/0 ::/0 udp dpt:123 2 177 ACCEPT udp -- * * ::/0 ::/0 udp dpt:161 0 0 ACCEPT udp -- * * ::/0 ::/0 udp dpt:514 0 0 ACCEPT udp -- * * ::/0 ::/0 udp dpt:546 0 0 ACCEPT udp -- * * ::/0 ::/0 udp dpt:547 16 1244 ACCEPT tcp -- * * ::/0 ::/0 state NEW tcp dpt:80 3664 288K ACCEPT tcp -- * * ::/0 ::/0 state NEW tcp dpt:443 3 188 ACCEPT tcp -- * * ::/0 ::/0 state NEW tcp dpt:8443 1 596 ACCEPT udp -- eth0 * ::/0 ::/0 udp dpt:500 1 632 ACCEPT udp -- eth0 * ::/0 ::/0 udp dpt:4500 0 0 ACCEPT esp -- eth0 * ::/0 ::/0 esp 0 0 ACCEPT tcp -- eth0 * ::/0 ::/0 tcp dpt:50 0 0 ACCEPT tcp -- eth0 * ::/0 ::/0 tcp dpt:51 353K 52M ACCEPT all -- * * fc00:5300:60:9389::/64 ::/0 328K 52M ACCEPT all -- * * fc01::10:0:0:0/80 ::/0 0 0 ACCEPT all -- * * fc01::172:16:0:0/104 ::/0 0 0 ACCEPT all -- * * fc01::192:168:0:0/104 ::/0 0 0 ACCEPT all -- * * fc00:41d0:701:1100::/64 ::/0 0 0 ACCEPT all -- * * fc00:41d0:801:2000::/64 ::/0 0 0 ACCEPT all -- * * fc00:1f00:8100:400::/64 ::/0 0 0 ACCEPT all -- * * fc00:4780:28:5295::/64 ::/0 0 0 ACCEPT all -- * * fc00::10:0:3:0/112 ::/0 0 0 ACCEPT all -- * * fee0::/16 ::/0 0 0 ACCEPT all -- * * fee1::/16 ::/0 0 0 ACCEPT all -- * * fee2::/120 ::/0 0 0 ACCEPT all -- * * fee3::/120 ::/0 0 0 ACCEPT all -- * * fee4::/120 ::/0 0 0 ACCEPT all -- * * fee5::/120 ::/0 0 0 DROP all -- * * fec0::/10 ::/0 0 0 DROP all -- * * fc00::/7 ::/0 18237 3766K ACCEPT all -- * * ::/0 2a02:4780:28:5295::1 0 0 ACCEPT all -- * * ::/0 fee5::1 0 0 ACCEPT all -- * * ::/0 ::/0 state RELATED,ESTABLISHED 0 0 LOG all -- * * ::/0 ::/0 LOG flags 0 level 4 prefix "INPUT-v6:" Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 aICMPs ipv6-icmp -- * * ::/0 ::/0 0 0 DROP all -- * * ::/0 ::/0 rt type:0 segsleft:0 0 0 ACCEPT all -- * * ff00::/8 ff00::/8 0 0 ACCEPT all -- incusbr0 lxcbr0 ::/0 ::/0 0 0 ACCEPT all -- incusbr0 lxcbr0 ::/0 ::/0 0 0 ACCEPT all -- incusbr0 eth0 ::/0 ::/0 4850 388K ACCEPT all -- eth0 incusbr0 ::/0 ::/0 0 0 ACCEPT all -- lxcbr0 eth0 ::/0 ::/0 0 0 ACCEPT all -- eth0 lxcbr0 ::/0 ::/0 0 0 ACCEPT all -- * * fc00:5300:60:9389::/64 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fc00:5300:60:9389::/64 0 0 ACCEPT all -- * * fc00:5300:60:9389::/64 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fc00:5300:60:9389::/64 0 0 ACCEPT all -- * * fc01::10:0:0:0/80 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fc01::10:0:0:0/80 0 0 ACCEPT all -- * * fc01::10:0:0:0/80 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fc01::10:0:0:0/80 0 0 ACCEPT all -- * * fc01::172:16:0:0/104 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fc01::172:16:0:0/104 0 0 ACCEPT all -- * * fc01::172:16:0:0/104 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fc01::172:16:0:0/104 0 0 ACCEPT all -- * * fc01::192:168:0:0/104 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fc01::192:168:0:0/104 0 0 ACCEPT all -- * * fc01::192:168:0:0/104 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fc01::192:168:0:0/104 0 0 ACCEPT all -- * * fc00:41d0:701:1100::/64 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fc00:41d0:701:1100::/64 0 0 ACCEPT all -- * * fc00:41d0:701:1100::/64 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fc00:41d0:701:1100::/64 0 0 ACCEPT all -- * * fc00:41d0:801:2000::/64 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fc00:41d0:801:2000::/64 0 0 ACCEPT all -- * * fc00:41d0:801:2000::/64 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fc00:41d0:801:2000::/64 0 0 ACCEPT all -- * * fc00:1f00:8100:400::/64 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fc00:1f00:8100:400::/64 0 0 ACCEPT all -- * * fc00:1f00:8100:400::/64 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fc00:1f00:8100:400::/64 0 0 ACCEPT all -- * * fc00:4780:28:5295::/64 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fc00:4780:28:5295::/64 0 0 ACCEPT all -- * * fc00:4780:28:5295::/64 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fc00:4780:28:5295::/64 0 0 ACCEPT all -- * * fc00::10:0:3:0/112 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fc00::10:0:3:0/112 0 0 ACCEPT all -- * * fc00::10:0:3:0/112 fec0::/10 2999 240K ACCEPT all -- * * fec0::/10 fc00::10:0:3:0/112 0 0 ACCEPT all -- * * fee0::/16 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fee0::/16 0 0 ACCEPT all -- * * fee0::/16 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fee0::/16 0 0 ACCEPT all -- * * fee1::/16 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fee1::/16 0 0 ACCEPT all -- * * fee1::/16 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fee1::/16 0 0 ACCEPT all -- * * fee2::/120 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fee2::/120 0 0 ACCEPT all -- * * fee2::/120 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fee2::/120 0 0 ACCEPT all -- * * fee3::/120 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fee3::/120 0 0 ACCEPT all -- * * fee3::/120 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fee3::/120 0 0 ACCEPT all -- * * fee4::/120 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fee4::/120 0 0 ACCEPT all -- * * fee4::/120 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fee4::/120 0 0 ACCEPT all -- * * fee5::/120 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fee5::/120 0 0 ACCEPT all -- * * fee5::/120 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fee5::/120 0 0 DROP all -- * * fec0::/10 fec0::/10 0 0 ACCEPT all -- * * fec0::/10 fc00::/7 0 0 ACCEPT all -- * * fc00::/7 fec0::/10 0 0 DROP all -- * * fc00::/7 fc00::/7 0 0 LOG all -- * * ::/0 ::/0 LOG flags 0 level 4 prefix "FORWARD-v6:" Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 14194 1378K aICMPs ipv6-icmp -- * * ::/0 ::/0 0 0 DROP all -- * * ::/0 ::/0 rt type:0 segsleft:0 0 0 CHECK_GRE tcp -- * * ::/0 ::/0 tcp spt:47 state NEW 0 0 CHECK_GRE udp -- * * ::/0 ::/0 udp spt:47 state NEW 0 0 DROP tcp -- * * ::/0 ::/0 tcp spt:81 0 0 DROP udp -- * * ::/0 ::/0 udp spt:81 20440 34M ACCEPT all -- * lo ::/0 ::/0 0 0 ACCEPT all -- * * ::/0 ff00::/8 0 0 ACCEPT tcp -- * * ::/0 2607:5300:60:9300::/56 tcp spt:22 0 0 ACCEPT tcp -- * * ::/0 fc00::/8 tcp spt:22 1656 170K ACCEPT tcp -- * * ::/0 fec0::/10 tcp spt:22 0 0 ACCEPT tcp -- * * ::/0 2607:5300:60:9300::/56 tcp spt:873 0 0 ACCEPT udp -- * * ::/0 2607:5300:60:9300::/56 udp spt:873 0 0 ACCEPT tcp -- * * ::/0 fc00::/8 tcp spt:873 0 0 ACCEPT udp -- * * ::/0 fc00::/8 udp spt:873 0 0 ACCEPT tcp -- * * ::/0 fec0::/10 tcp spt:873 0 0 ACCEPT udp -- * * ::/0 fec0::/10 udp spt:873 0 0 ACCEPT tcp -- * * ::/0 ::/0 tcp spt:514 0 0 ACCEPT tcp -- * * ::/0 ::/0 tcp spt:4949 0 0 ACCEPT tcp -- * * ::/0 ::/0 tcp spt:5201 0 0 ACCEPT udp -- * * ::/0 ::/0 udp spt:123 0 0 ACCEPT udp -- * * ::/0 ::/0 udp spt:161 0 0 ACCEPT udp -- * * ::/0 ::/0 udp spt:514 0 0 ACCEPT udp -- * * ::/0 ::/0 udp spt:546 0 0 ACCEPT udp -- * * ::/0 ::/0 udp spt:547 97 107K ACCEPT tcp -- * * ::/0 ::/0 state RELATED,ESTABLISHED tcp spt:80 15810 10M ACCEPT tcp -- * * ::/0 ::/0 state RELATED,ESTABLISHED tcp spt:443 3 180 ACCEPT tcp -- * * ::/0 ::/0 state RELATED,ESTABLISHED tcp spt:8443 1 84 ACCEPT udp -- * eth0 ::/0 ::/0 udp spt:500 1 88 ACCEPT udp -- * eth0 ::/0 ::/0 udp spt:4500 0 0 ACCEPT tcp -- * eth0 ::/0 ::/0 tcp spt:50 0 0 ACCEPT tcp -- * eth0 ::/0 ::/0 tcp spt:51 451K 36M ACCEPT all -- * * ::/0 fc00:5300:60:9389::/64 423K 34M ACCEPT all -- * * ::/0 fc01::10:0:0:0/80 0 0 ACCEPT all -- * * ::/0 fc01::172:16:0:0/104 0 0 ACCEPT all -- * * ::/0 fc01::192:168:0:0/104 0 0 ACCEPT all -- * * ::/0 fc00:41d0:701:1100::/64 0 0 ACCEPT all -- * * ::/0 fc00:41d0:801:2000::/64 0 0 ACCEPT all -- * * ::/0 fc00:1f00:8100:400::/64 0 0 ACCEPT all -- * * ::/0 fc00:4780:28:5295::/64 0 0 ACCEPT all -- * * ::/0 fc00::10:0:3:0/112 0 0 ACCEPT all -- * * ::/0 fee0::/16 0 0 ACCEPT all -- * * ::/0 fee1::/16 0 0 ACCEPT all -- * * ::/0 fee2::/120 0 0 ACCEPT all -- * * ::/0 fee3::/120 0 0 ACCEPT all -- * * ::/0 fee4::/120 0 0 ACCEPT all -- * * ::/0 fee5::/120 0 0 DROP all -- * * ::/0 fec0::/10 0 0 DROP all -- * * ::/0 fc00::/7 647 81653 ACCEPT all -- * * 2a02:4780:28:5295::1 ::/0 0 0 ACCEPT all -- * * fee5::1 ::/0 1 84 ACCEPT all -- * * ::/0 ::/0 state NEW 0 0 ACCEPT all -- * * ::/0 ::/0 state ESTABLISHED 0 0 ACCEPT all -- * * ::/0 ::/0 state RELATED 0 0 LOG all -- * * ::/0 ::/0 LOG flags 0 level 4 prefix "OUTPUT-v6:" Chain BLACK (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * ::/0 ::/0 recent: SET name: BLACKLIST side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff Chain CHECK_GRE (4 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * ::/0 ::/0 recent: UPDATE seconds: 86400 reap name: BLACKLIST side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 0 0 BLACK all -- * * ::/0 ::/0 recent: UPDATE seconds: 60 reap hit_count: 3 name: TIMER side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 0 0 ACCEPT all -- * * ::/0 ::/0 recent: SET name: TIMER side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff Chain Syn-FLOOD (1 references) pkts bytes target prot opt in out source destination 3996 310K RETURN all -- * * ::/0 ::/0 limit: avg 1/sec burst 4 31931 2548K DROP all -- * * ::/0 ::/0 Chain aICMPs (3 references) pkts bytes target prot opt in out source destination 4869 624K ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 1 110 141K ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 2 code 0 0 0 ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 3 code 0 0 0 ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 3 code 1 0 0 ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 4 code 0 1 148 ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 4 code 1 0 0 ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 4 code 2 3751 348K ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 128 code 0 3639 336K ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 129 code 0 0 0 ACCEPT ipv6-icmp -- * * fe80::/64 ::/0 ipv6-icmptype 130 code 0 ctstate NEW HL match HL == 1 0 0 ACCEPT ipv6-icmp -- * * fe80::/64 ::/0 ipv6-icmptype 131 code 0 ctstate NEW HL match HL == 1 0 0 ACCEPT ipv6-icmp -- * * fe80::/64 ::/0 ipv6-icmptype 132 code 0 ctstate NEW HL match HL == 1 15 840 ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 133 code 0 HL match HL == 255 208 26624 ACCEPT ipv6-icmp -- * * fe80::/64 ::/0 ipv6-icmptype 134 code 0 HL match HL == 255 8761 631K ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 135 code 0 HL match HL == 255 602 38528 ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 136 code 0 HL match HL == 255 0 0 DROP ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 137 code 0 0 0 DROP ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 138 code 0 0 0 DROP ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 139 code 0 0 0 DROP ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 140 code 0 0 0 ACCEPT ipv6-icmp -- * * ::/0 ff02::1 ipv6-icmptype 141 code 0 HL match HL == 255 0 0 ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 142 code 0 HL match HL == 255 0 0 ACCEPT ipv6-icmp -- * * fe80::/64 ::/0 ipv6-icmptype 143 ctstate NEW HL match HL == 1 0 0 DROP ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 144 code 0 0 0 DROP ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 145 code 0 0 0 DROP ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 146 code 0 0 0 DROP ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 147 0 0 ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 148 HL match HL == 255 0 0 ACCEPT ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 149 HL match HL == 255 0 0 ACCEPT ipv6-icmp -- * * fe80::/64 ::/0 ipv6-icmptype 151 ctstate NEW HL match HL == 1 0 0 ACCEPT ipv6-icmp -- * * fe80::/64 ::/0 ipv6-icmptype 152 ctstate NEW HL match HL == 1 0 0 ACCEPT ipv6-icmp -- * * fe80::/64 ::/0 ipv6-icmptype 153 ctstate NEW HL match HL == 1 0 0 DROP ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 200 0 0 DROP ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 201 0 0 DROP ipv6-icmp -- * * ::/0 ::/0 ipv6-icmptype 255