1ip6tables-translate -A INPUT -m ah --ahspi 500 -j DROP 2nft add rule ip6 filter INPUT ah spi 500 counter drop 3 4ip6tables-translate -A INPUT -m ah --ahspi 500:550 -j DROP 5nft add rule ip6 filter INPUT ah spi 500-550 counter drop 6 7ip6tables-translate -A INPUT -m ah ! --ahlen 120 8nft add rule ip6 filter INPUT ah hdrlength != 120 counter 9 10ip6tables-translate -A INPUT -m ah --ahres 11nft add rule ip6 filter INPUT ah reserved 1 counter 12 13ip6tables-translate -A INPUT -m ah --ahspi 500 ! --ahlen 120 -j DROP 14nft add rule ip6 filter INPUT ah spi 500 ah hdrlength != 120 counter drop 15 16ip6tables-translate -A INPUT -m ah --ahspi 500 --ahlen 120 --ahres -j ACCEPT 17nft add rule ip6 filter INPUT ah spi 500 ah hdrlength 120 ah reserved 1 counter accept 18