#!/bin/bash

# Make sure ip6tables-restore simply ignores
# rules starting with -4

set -e

# show rules, drop uninteresting policy settings
ipt_show() {
	$XT_MULTI ip6tables -S | grep -v '^-P'
}

# issue reproducer for ip6tables-restore

$XT_MULTI ip6tables-restore <<EOF
*filter
-A FORWARD -m comment --comment any -j ACCEPT
-4 -A FORWARD -m comment --comment ipv4 -j ACCEPT
-6 -A FORWARD -m comment --comment ipv6 -j ACCEPT
COMMIT
EOF

EXPECT='-A FORWARD -m comment --comment any -j ACCEPT
-A FORWARD -m comment --comment ipv6 -j ACCEPT'

diff -u -Z <(echo -e "$EXPECT") <(ipt_show)