1*a71a9546SAutomerger Merge Workerip6tables-translate -A INPUT -m ah --ahspi 500 -j DROP 2*a71a9546SAutomerger Merge Workernft 'add rule ip6 filter INPUT ah spi 500 counter drop' 3*a71a9546SAutomerger Merge Worker 4*a71a9546SAutomerger Merge Workerip6tables-translate -A INPUT -m ah --ahspi 500:550 -j DROP 5*a71a9546SAutomerger Merge Workernft 'add rule ip6 filter INPUT ah spi 500-550 counter drop' 6*a71a9546SAutomerger Merge Worker 7*a71a9546SAutomerger Merge Workerip6tables-translate -A INPUT -m ah ! --ahlen 120 8*a71a9546SAutomerger Merge Workernft 'add rule ip6 filter INPUT ah hdrlength != 120 counter' 9*a71a9546SAutomerger Merge Worker 10*a71a9546SAutomerger Merge Workerip6tables-translate -A INPUT -m ah --ahres 11*a71a9546SAutomerger Merge Workernft 'add rule ip6 filter INPUT ah reserved 1 counter' 12*a71a9546SAutomerger Merge Worker 13*a71a9546SAutomerger Merge Workerip6tables-translate -A INPUT -m ah --ahspi 500 ! --ahlen 120 -j DROP 14*a71a9546SAutomerger Merge Workernft 'add rule ip6 filter INPUT ah spi 500 ah hdrlength != 120 counter drop' 15*a71a9546SAutomerger Merge Worker 16*a71a9546SAutomerger Merge Workerip6tables-translate -A INPUT -m ah --ahspi 500 --ahlen 120 --ahres -j ACCEPT 17*a71a9546SAutomerger Merge Workernft 'add rule ip6 filter INPUT ah spi 500 ah hdrlength 120 ah reserved 1 counter accept' 18