1ebtables-translate -A FORWARD -p ip6 --ip6-src ! dead::beef/64 -j ACCEPT 2nft 'add rule bridge filter FORWARD ip6 saddr != dead::/64 counter accept' 3 4ebtables-translate -A FORWARD -p ip6 ! --ip6-dst dead:beef::/64 -j ACCEPT 5nft 'add rule bridge filter FORWARD ip6 daddr != dead:beef::/64 counter accept' 6 7ebtables-translate -I FORWARD -p ip6 --ip6-dst f00:ba:: 8nft 'insert rule bridge filter FORWARD ip6 daddr f00:ba:: counter' 9 10ebtables-translate -I OUTPUT -o eth0 -p ip6 --ip6-tclass 0xff 11nft 'insert rule bridge filter OUTPUT oifname "eth0" ip6 dscp 0x3f counter' 12 13ebtables-translate -A FORWARD -p ip6 --ip6-proto tcp --ip6-dport 22 14nft 'add rule bridge filter FORWARD ether type ip6 tcp dport 22 counter' 15 16ebtables-translate -A FORWARD -p ip6 --ip6-proto udp --ip6-sport 1024:65535 17nft 'add rule bridge filter FORWARD ether type ip6 udp sport 1024-65535 counter' 18 19ebtables-translate -A FORWARD -p ip6 --ip6-proto 253 20nft 'add rule bridge filter FORWARD ether type ip6 meta l4proto 253 counter' 21 22ebtables-translate -A FORWARD -p ip6 --ip6-protocol icmpv6 --ip6-icmp-type "echo-request" 23nft 'add rule bridge filter FORWARD icmpv6 type 128 counter' 24 25ebtables-translate -A FORWARD -p ip6 --ip6-protocol icmpv6 --ip6-icmp-type 1/1 26nft 'add rule bridge filter FORWARD icmpv6 type 1 icmpv6 code 1 counter' 27 28ebtables-translate -A FORWARD -p ip6 --ip6-protocol icmpv6 --ip6-icmp-type ! 1:10 29nft 'add rule bridge filter FORWARD icmpv6 type != 1-10 counter' 30