Thanks to a very helpful member of this list, off-list (so not sure if he wants to be named and famed), the problem has been resolved, by allowing INPUT for neigh discovery packets type 135 and 136 I have quickly learned that the ipv4 habits of yesteryear must go out the window for ipv6 to work. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html