On Thu, Jan 17, 2019 at 04:01:41PM +0200, Jussi Laakkonen wrote:
Flags is required to be set as IP6T_F_PROTO if protocol for IPv6 rule
being set (INCLUDEDIR/linux/netfilter_ipv6/ip6_tables.h). Without this
being set, ICMPv6 rules, for example, are installed to ip6tables but no
packet matches the rule as protocol check is skipped in kernel.