filter filter
0 1 NF_INET_FORWARD drop ip6