Static hostname: lab3w Icon name: computer-server Chassis: server Machine ID: 995a2432b78f49fca6dc8014dcae1eb5 Boot ID: aad9d89ed69247ccb14e6a969b561526 Operating System: Debian GNU/Linux 10 (buster) Kernel: Linux 5.4.203-1-pve Architecture: x86-64 Date : 2026-08-23 18:45:10 EDT 18:45:10 up 20 days, 21:30, 1 user, load average: 1,68, 2,21, 2,01 ● firewall-ipv6.service - LSB: Start daemon at boot time Loaded: loaded (/etc/init.d/firewall-ipv6; generated) Active: active (exited) since Thu 2026-08-06 09:24:51 EDT; 2 weeks 3 days ago Docs: man:systemd-sysv-generator(8) Process: 26664 ExecStart=/etc/init.d/firewall-ipv6 start (code=exited, status=0/SUCCESS) Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable. Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 1422 91008 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 128 limit: above 1/sec burst 1 mode srcip 545K 61M aICMPs icmpv6 * * ::/0 ::/0 28 2464 DROP tcp vmbr0 * ::/0 ::/0 tcp flags:!0x17/0x02 state NEW 0 0 ACCEPT all lo * fee0::/16 ::/0 0 0 ACCEPT all lo * fee1::/16 ::/0 0 0 ACCEPT all lo * fee2::/120 ::/0 0 0 ACCEPT all lo * fee3::/120 ::/0 0 0 ACCEPT all lo * fee4::/120 ::/0 0 0 ACCEPT all lo * fee5::/120 ::/0 36877 2892K Syn-FLOOD tcp vmbr0 * ::/0 ::/0 tcp flags:0x17/0x02 0 0 CHECK_GRE tcp * * ::/0 ::/0 tcp dpt:47 state NEW 0 0 CHECK_GRE udp * * ::/0 ::/0 udp dpt:47 state NEW 2 120 DROP tcp * * ::/0 ::/0 tcp dpt:81 0 0 DROP udp * * ::/0 ::/0 udp dpt:81 0 0 ACCEPT all * * ::/0 ff00::/8 0 0 ACCEPT tcp * * 2001:bc8:25bb:ff00::/56 ::/0 tcp dpt:22 0 0 ACCEPT tcp * * fc00::/8 ::/0 tcp dpt:22 2130 218K ACCEPT tcp * * fec0::/10 ::/0 tcp dpt:22 1311 104K tcp * * ::/0 ::/0 tcp dpt:22 state NEW recent: SET name: SSH side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 257 20356 DROP tcp * * ::/0 ::/0 tcp dpt:22 recent: UPDATE seconds: 60 hit_count: 3 TTL-Match name: SSH side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 12062 2069K ACCEPT tcp * * ::/0 ::/0 tcp dpt:22 0 0 ACCEPT tcp * * 2001:bc8:25bb:ff00::/56 ::/0 tcp dpt:873 0 0 ACCEPT udp * * 2001:bc8:25bb:ff00::/56 ::/0 udp dpt:873 0 0 ACCEPT tcp * * fc00::/8 ::/0 tcp dpt:873 0 0 ACCEPT udp * * fc00::/8 ::/0 udp dpt:873 0 0 ACCEPT tcp * * fec0::/10 ::/0 tcp dpt:873 0 0 ACCEPT udp * * fec0::/10 ::/0 udp dpt:873 0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:514 1 64 ACCEPT tcp * * ::/0 ::/0 tcp dpt:4949 258 24590 ACCEPT udp * * ::/0 ::/0 udp dpt:123 12 1166 ACCEPT udp * * ::/0 ::/0 udp dpt:161 0 0 ACCEPT udp * * ::/0 ::/0 udp dpt:514 0 0 ACCEPT udp * * ::/0 ::/0 udp dpt:546 0 0 ACCEPT udp * * ::/0 ::/0 udp dpt:547 3585 286K ACCEPT tcp * * ::/0 ::/0 state NEW tcp dpt:80 70104 5582K ACCEPT tcp * * ::/0 ::/0 state NEW tcp dpt:443 2 124 ACCEPT tcp * * ::/0 ::/0 state NEW tcp dpt:8006 14 4194 ACCEPT udp vmbr0 * ::/0 ::/0 udp dpt:500 1 252 ACCEPT udp vmbr0 * ::/0 ::/0 udp dpt:4500 0 0 ACCEPT esp vmbr0 * ::/0 ::/0 esp 0 0 ACCEPT tcp vmbr0 * ::/0 ::/0 tcp dpt:50 0 0 ACCEPT tcp vmbr0 * ::/0 ::/0 tcp dpt:51 5806K 13G ACCEPT all * * fc00:5300:60:9389::/64 ::/0 2065K 237M ACCEPT all * * fc01::10:0:0:0/80 ::/0 0 0 ACCEPT all * * fc01::172:16:0:0/104 ::/0 0 0 ACCEPT all * * fc01::192:168:0:0/104 ::/0 0 0 ACCEPT all * * fc00:41d0:701:1100::/64 ::/0 0 0 ACCEPT all * * fc00:41d0:801:2000::/64 ::/0 0 0 ACCEPT all * * fc00:1f00:8100:400::/64 ::/0 0 0 ACCEPT all * * fc00:4780:28:5295::/64 ::/0 0 0 ACCEPT all * * fc00::10:0:3:0/112 ::/0 0 0 ACCEPT all * * fee0::/16 ::/0 74 10485 ACCEPT all * * fee1::/16 ::/0 0 0 ACCEPT all * * fee2::/120 ::/0 0 0 ACCEPT all * * fee3::/120 ::/0 0 0 ACCEPT all * * fee4::/120 ::/0 0 0 ACCEPT all * * fee5::/120 ::/0 0 0 DROP all * * fec0::/10 ::/0 0 0 DROP all * * fc00::/7 ::/0 1341K 171M ACCEPT all * * ::/0 2607:5300:60:9389::1 171K 14M ACCEPT all * * ::/0 2607:5300:60:9389:15:1:0:f 0 0 ACCEPT all * * ::/0 2607:5300:60:9389:17:4:0:f 24 2340 ACCEPT all * * ::/0 2607:5300:60:9389:17:4c1:0:1f 621K 98M ACCEPT all * * ::/0 2607:5300:60:9389:15:2:0:f 2652 159K ACCEPT all * * ::/0 ::/0 state RELATED,ESTABLISHED Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 101K 13M aICMPs icmpv6 * * ::/0 ::/0 0 0 ACCEPT all * lo fee0::/16 fc00::/7 0 0 ACCEPT all lo * fc00::/7 fee0::/16 0 0 ACCEPT all * lo fee0::/16 fec0::/10 0 0 ACCEPT all lo * fec0::/10 fee0::/16 0 0 ACCEPT all * lo fee1::/16 fc00::/7 0 0 ACCEPT all lo * fc00::/7 fee1::/16 0 0 ACCEPT all * lo fee1::/16 fec0::/10 0 0 ACCEPT all lo * fec0::/10 fee1::/16 0 0 ACCEPT all * lo fee2::/120 fc00::/7 0 0 ACCEPT all lo * fc00::/7 fee2::/120 0 0 ACCEPT all * lo fee2::/120 fec0::/10 0 0 ACCEPT all lo * fec0::/10 fee2::/120 0 0 ACCEPT all * lo fee3::/120 fc00::/7 0 0 ACCEPT all lo * fc00::/7 fee3::/120 0 0 ACCEPT all * lo fee3::/120 fec0::/10 0 0 ACCEPT all lo * fec0::/10 fee3::/120 0 0 ACCEPT all * lo fee4::/120 fc00::/7 0 0 ACCEPT all lo * fc00::/7 fee4::/120 0 0 ACCEPT all * lo fee4::/120 fec0::/10 0 0 ACCEPT all lo * fec0::/10 fee4::/120 0 0 ACCEPT all * lo fee5::/120 fc00::/7 0 0 ACCEPT all lo * fc00::/7 fee5::/120 0 0 ACCEPT all * lo fee5::/120 fec0::/10 0 0 ACCEPT all lo * fec0::/10 fee5::/120 0 0 ACCEPT all * * ff00::/8 ff00::/8 0 0 ACCEPT all vmbr1 vmbr2 ::/0 ::/0 0 0 ACCEPT all vmbr2 vmbr1 ::/0 ::/0 141K 47M ACCEPT all vmbr1 vmbr4 ::/0 ::/0 141K 15M ACCEPT all vmbr4 vmbr1 ::/0 ::/0 29626 10M ACCEPT all vmbr1 vmbr5 ::/0 ::/0 29307 5282K ACCEPT all vmbr5 vmbr1 ::/0 ::/0 0 0 ACCEPT all vmbr2 vmbr4 ::/0 ::/0 0 0 ACCEPT all vmbr4 vmbr2 ::/0 ::/0 0 0 ACCEPT all vmbr2 vmbr5 ::/0 ::/0 0 0 ACCEPT all vmbr5 vmbr2 ::/0 ::/0 98060 12M ACCEPT all vmbr4 vmbr5 ::/0 ::/0 98059 23M ACCEPT all vmbr5 vmbr4 ::/0 ::/0 3857K 544M ACCEPT all vmbr1 vmbr0 ::/0 ::/0 5247K 4188M ACCEPT all vmbr0 vmbr1 ::/0 ::/0 0 0 ACCEPT all vmbr2 vmbr0 ::/0 ::/0 0 0 ACCEPT all vmbr0 vmbr2 ::/0 ::/0 159K 52M ACCEPT all vmbr4 vmbr0 ::/0 ::/0 47080 6408K ACCEPT all vmbr0 vmbr4 ::/0 ::/0 2405K 498M ACCEPT all vmbr5 vmbr0 ::/0 ::/0 2720K 1574M ACCEPT all vmbr0 vmbr5 ::/0 ::/0 0 0 ACCEPT all * * fc00:5300:60:9389::/64 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc00:5300:60:9389::/64 0 0 ACCEPT all * * fc00:5300:60:9389::/64 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00:5300:60:9389::/64 0 0 ACCEPT all * * fc01::10:0:0:0/80 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc01::10:0:0:0/80 1928K 285M ACCEPT all * * fc01::10:0:0:0/80 fec0::/10 2772K 224M ACCEPT all * * fec0::/10 fc01::10:0:0:0/80 0 0 ACCEPT all * * fc01::172:16:0:0/104 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc01::172:16:0:0/104 0 0 ACCEPT all * * fc01::172:16:0:0/104 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc01::172:16:0:0/104 0 0 ACCEPT all * * fc01::192:168:0:0/104 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc01::192:168:0:0/104 0 0 ACCEPT all * * fc01::192:168:0:0/104 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc01::192:168:0:0/104 0 0 ACCEPT all * * fc00:41d0:701:1100::/64 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc00:41d0:701:1100::/64 0 0 ACCEPT all * * fc00:41d0:701:1100::/64 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00:41d0:701:1100::/64 0 0 ACCEPT all * * fc00:41d0:801:2000::/64 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc00:41d0:801:2000::/64 0 0 ACCEPT all * * fc00:41d0:801:2000::/64 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00:41d0:801:2000::/64 0 0 ACCEPT all * * fc00:1f00:8100:400::/64 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc00:1f00:8100:400::/64 0 0 ACCEPT all * * fc00:1f00:8100:400::/64 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00:1f00:8100:400::/64 0 0 ACCEPT all * * fc00:4780:28:5295::/64 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc00:4780:28:5295::/64 0 0 ACCEPT all * * fc00:4780:28:5295::/64 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00:4780:28:5295::/64 0 0 ACCEPT all * * fc00::10:0:3:0/112 fc00::/7 0 0 ACCEPT all * * fc00::/7 fc00::10:0:3:0/112 0 0 ACCEPT all * * fc00::10:0:3:0/112 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00::10:0:3:0/112 0 0 ACCEPT all * * fee0::/16 fc00::/7 0 0 ACCEPT all * * fc00::/7 fee0::/16 0 0 ACCEPT all * * fee0::/16 fec0::/10 0 0 ACCEPT all * * fec0::/10 fee0::/16 0 0 ACCEPT all * * fee1::/16 fc00::/7 0 0 ACCEPT all * * fc00::/7 fee1::/16 18298 1676K ACCEPT all * * fee1::/16 fec0::/10 16790 2278K ACCEPT all * * fec0::/10 fee1::/16 0 0 ACCEPT all * * fee2::/120 fc00::/7 0 0 ACCEPT all * * fc00::/7 fee2::/120 0 0 ACCEPT all * * fee2::/120 fec0::/10 0 0 ACCEPT all * * fec0::/10 fee2::/120 0 0 ACCEPT all * * fee3::/120 fc00::/7 0 0 ACCEPT all * * fc00::/7 fee3::/120 0 0 ACCEPT all * * fee3::/120 fec0::/10 0 0 ACCEPT all * * fec0::/10 fee3::/120 0 0 ACCEPT all * * fee4::/120 fc00::/7 0 0 ACCEPT all * * fc00::/7 fee4::/120 0 0 ACCEPT all * * fee4::/120 fec0::/10 0 0 ACCEPT all * * fec0::/10 fee4::/120 0 0 ACCEPT all * * fee5::/120 fc00::/7 0 0 ACCEPT all * * fc00::/7 fee5::/120 0 0 ACCEPT all * * fee5::/120 fec0::/10 0 0 ACCEPT all * * fec0::/10 fee5::/120 0 0 DROP all * * fec0::/10 fec0::/10 0 0 ACCEPT all * * fec0::/10 fc00::/7 0 0 ACCEPT all * * fc00::/7 fec0::/10 0 0 DROP all * * fc00::/7 fc00::/7 Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 267K 19M aICMPs icmpv6 * * ::/0 ::/0 0 0 ACCEPT all * lo ::/0 fee0::/16 0 0 ACCEPT all * lo ::/0 fee1::/16 0 0 ACCEPT all * lo ::/0 fee2::/120 0 0 ACCEPT all * lo ::/0 fee3::/120 0 0 ACCEPT all * lo ::/0 fee4::/120 0 0 ACCEPT all * lo ::/0 fee5::/120 0 0 CHECK_GRE tcp * * ::/0 ::/0 tcp spt:47 state NEW 0 0 CHECK_GRE udp * * ::/0 ::/0 udp spt:47 state NEW 0 0 DROP tcp * * ::/0 ::/0 tcp spt:81 0 0 DROP udp * * ::/0 ::/0 udp spt:81 0 0 ACCEPT all * * ::/0 ff00::/8 0 0 ACCEPT tcp * * ::/0 2001:bc8:25bb:ff00::/56 tcp spt:22 0 0 ACCEPT tcp * * ::/0 fc00::/8 tcp spt:22 2033 397K ACCEPT tcp * * ::/0 fec0::/10 tcp spt:22 0 0 ACCEPT tcp * * ::/0 2001:bc8:25bb:ff00::/56 tcp spt:873 0 0 ACCEPT udp * * ::/0 2001:bc8:25bb:ff00::/56 udp spt:873 0 0 ACCEPT tcp * * ::/0 fc00::/8 tcp spt:873 0 0 ACCEPT udp * * ::/0 fc00::/8 udp spt:873 0 0 ACCEPT tcp * * ::/0 fec0::/10 tcp spt:873 0 0 ACCEPT udp * * ::/0 fec0::/10 udp spt:873 0 0 ACCEPT tcp * * ::/0 ::/0 tcp spt:514 1 60 ACCEPT tcp * * ::/0 ::/0 tcp spt:4949 252 24192 ACCEPT udp * * ::/0 ::/0 udp spt:123 0 0 ACCEPT udp * * ::/0 ::/0 udp spt:161 0 0 ACCEPT udp * * ::/0 ::/0 udp spt:514 0 0 ACCEPT udp * * ::/0 ::/0 udp spt:546 0 0 ACCEPT udp * * ::/0 ::/0 udp spt:547 7814 1219K ACCEPT tcp * * ::/0 ::/0 state RELATED,ESTABLISHED tcp spt:80 2412K 7150M ACCEPT tcp * * ::/0 ::/0 state RELATED,ESTABLISHED tcp spt:443 2 120 ACCEPT tcp * * ::/0 ::/0 state RELATED,ESTABLISHED tcp spt:8006 12 3027 ACCEPT udp * vmbr0 ::/0 ::/0 udp spt:500 0 0 ACCEPT udp * vmbr0 ::/0 ::/0 udp spt:4500 0 0 ACCEPT tcp * vmbr0 ::/0 ::/0 tcp spt:50 0 0 ACCEPT tcp * vmbr0 ::/0 ::/0 tcp spt:51 8781K 816M ACCEPT all * * ::/0 fc00:5300:60:9389::/64 3726K 285M ACCEPT all * * ::/0 fc01::10:0:0:0/80 0 0 ACCEPT all * * ::/0 fc01::172:16:0:0/104 0 0 ACCEPT all * * ::/0 fc01::192:168:0:0/104 0 0 ACCEPT all * * ::/0 fc00:41d0:701:1100::/64 0 0 ACCEPT all * * ::/0 fc00:41d0:801:2000::/64 0 0 ACCEPT all * * ::/0 fc00:1f00:8100:400::/64 0 0 ACCEPT all * * ::/0 fc00:4780:28:5295::/64 0 0 ACCEPT all * * ::/0 fc00::10:0:3:0/112 0 0 ACCEPT all * * ::/0 fee0::/16 0 0 ACCEPT all * * ::/0 fee1::/16 0 0 ACCEPT all * * ::/0 fee2::/120 0 0 ACCEPT all * * ::/0 fee3::/120 0 0 ACCEPT all * * ::/0 fee4::/120 0 0 ACCEPT all * * ::/0 fee5::/120 0 0 DROP all * * ::/0 fec0::/10 0 0 DROP all * * ::/0 fc00::/7 446K 38M ACCEPT all * * 2607:5300:60:9389::1 ::/0 317K 26M ACCEPT all * * 2607:5300:60:9389:15:1:0:f ::/0 0 0 ACCEPT all * * 2607:5300:60:9389:17:4:0:f ::/0 29 3160 ACCEPT all * * 2607:5300:60:9389:17:4c1:0:1f ::/0 690K 72M ACCEPT all * * 2607:5300:60:9389:15:2:0:f ::/0 2652 212K ACCEPT all * * ::/0 ::/0 state NEW,RELATED,ESTABLISHED Chain BLACK (1 references) pkts bytes target prot opt in out source destination 0 0 DROP all * * ::/0 ::/0 recent: SET name: BLACKLIST side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff Chain CHECK_GRE (4 references) pkts bytes target prot opt in out source destination 0 0 DROP all * * ::/0 ::/0 recent: UPDATE seconds: 86400 reap name: BLACKLIST side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 0 0 BLACK all * * ::/0 ::/0 recent: UPDATE seconds: 60 reap hit_count: 3 name: TIMER side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 0 0 ACCEPT all * * ::/0 ::/0 recent: SET name: TIMER side: source mask: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff Chain Syn-FLOOD (1 references) pkts bytes target prot opt in out source destination 18570 1436K RETURN all * * ::/0 ::/0 limit: avg 1/sec burst 4 18307 1457K DROP all * * ::/0 ::/0 Chain aICMPs (3 references) pkts bytes target prot opt in out source destination 149K 23M ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 1 1448 1853K ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 2 code 0 321K 39M ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 3 code 0 19 24320 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 3 code 1 0 0 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 4 code 0 78 11128 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 4 code 1 0 0 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 4 code 2 243K 16M ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 128 code 0 36924 2549K ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 129 code 0 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 130 code 0 ctstate NEW HL match HL == 1 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 131 code 0 ctstate NEW HL match HL == 1 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 132 code 0 ctstate NEW HL match HL == 1 219 12264 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 133 code 0 HL match HL == 255 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 134 code 0 HL match HL == 255 97861 7046K ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 135 code 0 HL match HL == 255 63715 4131K ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 136 code 0 HL match HL == 255 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 137 code 0 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 138 code 0 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 139 code 0 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 140 code 0 0 0 ACCEPT icmpv6 * * ::/0 ff02::1 ipv6-icmptype 141 code 0 HL match HL == 255 0 0 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 142 code 0 HL match HL == 255 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 143 ctstate NEW HL match HL == 1 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 144 code 0 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 145 code 0 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 146 code 0 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 147 0 0 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 148 HL match HL == 255 0 0 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmptype 149 HL match HL == 255 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 151 ctstate NEW HL match HL == 1 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 152 ctstate NEW HL match HL == 1 0 0 ACCEPT icmpv6 * * fe80::/64 ::/0 ipv6-icmptype 153 ctstate NEW HL match HL == 1 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 200 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 201 0 0 DROP icmpv6 * * ::/0 ::/0 ipv6-icmptype 255