Hi All. On the current net-next if you on HOSTA do: ip6tables -I INPUT -p icmpv6 -j DROP ip6tables -I INPUT -p icmpv6 -m icmp6 --icmpv6-type 128 -j ACCEPT and on HOSTB you do: ping6 HOSTA -s2000 (MTU is 1500) Only the first ICMP echo request will be passed through, the rest is not passed on HOSTA. This issue does not occur with smaller packets than MTU (where fragmentation does not happen). I'm trying to find out where the problem is. Any quick ideas? Thanks Jiri -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html