It appears to me that for IPv4: -m addrtype --dst-type UNICAST,MULTICAST will match if the address type is either unicast or multicast whereas for IPv6 it will match only if the address type is both unicast and multicast, i.e. it will never match. Is it intentional that the matches work in opposite ways (i.e. IPv4 matches on an OR of the address types, whereas IPv6 is an AND)? If it is the intended way of working, would it be worth stating this in the help and man pages? Quentin Armitage -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
