Hello, According to my ip6tables, a rule like this already exists: # ip6tables -C INPUT -p tcp -m multiport --dports 80,443 -j ACCEPT && echo Exists Exists Except that it doesn't, and an extra IP filter is present: # ip6tables-save | grep 80,443 -A INPUT -s fd39::/16 -p tcp -m multiport --dports 80,443 -j ACCEPT Is that the expected behaviour? ip6tables v1.8.9 (legacy) Thanks -- With respect, Roman