···

       
82
       
82
       
 
       
            meta l4proto ipv6-icmp accept

     

       
83
       
83
       
 
       
            ip6 ecn not-ect accept

     

       
84
       
84
       
 
       
            udp dport dhcpv6-client ct state { new, untracked } accept

     

       
85
       
85
       
-
       
            udp dport { http, https } ct state new accept

     

       
86
       
86
       
-
       
            tcp dport { http, https } ct state new accept

     

       
87
       
85
       
 
       
            udp dport 41641 ct state new accept

     

       
88
       
86
       
 
       
            reject with icmpx type port-unreachable

     

       
89
       
87
       
 
       
          }