Ok, fixed. I also fixed a ipset restore bug. > >>But maybe we can simply use > >> > >>-d ff00::/8 > >> > >>to match ipv6 multicast traffic? > > Yes, I found same rules for ipv6 multicast here: > > > https://www.sixxs.net/wiki/IPv6_Firewalling > http://wiki.openwrt.org/doc/howto/netfilter/netfilter.ip6tables.example1