I receive messages in my log like the following:
DROP IPv6 forward: in: out:, connection-state:invalid src-mac , proto TCP (RST), [2a00> :1450:> 4005:800::200a]:443->[]:36772, len 20
…but I have the following rules defined and enabled:
chain=forward action=drop connection-state=invalid connection-type=“” log=no log-prefix=“”
chain=forward action=drop log=yes log-prefix=“DROP IPv6”
Why isn’t the packet dropped by the first rule but by the second?