# Generated by ip6tables-save v1.6.0 on Sun Feb 24 18:01:56 2019
*filter
:INPUT DROP [0:0]
:FORWARD DROP [1:60]
:OUTPUT ACCEPT [69:7421]
-A INPUT -i he-ipv6 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -s 2001:XXXX::/64 -j ACCEPT
-A INPUT -s fe80::/10 -i br0 -j ACCEPT
-A INPUT -p ipv6-icmp -j ACCEPT
-A INPUT -p igmp -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
-A FORWARD -i he-ipv6 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 2001:XXXX::/64 -j ACCEPT
-A FORWARD -p ipv6-icmp -j ACCEPT
-A FORWARD -p igmp -j ACCEPT
-A FORWARD -p udp -m udp --dport 10888:11019 -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 22 -j ACCEPT
COMMIT
# Completed on Sun Feb 24 18:01:56 2019