1ip6tables-translate -A INPUT -m ah --ahspi 500 -j DROP 2nft 'add rule ip6 filter INPUT ah spi 500 counter drop' 3 4ip6tables-translate -A INPUT -m ah --ahspi 500:550 -j DROP 5nft 'add rule ip6 filter INPUT ah spi 500-550 counter drop' 6 7ip6tables-translate -A INPUT -m ah ! --ahlen 120 8nft 'add rule ip6 filter INPUT ah hdrlength != 120 counter' 9 10ip6tables-translate -A INPUT -m ah --ahres 11nft 'add rule ip6 filter INPUT ah reserved 1 counter' 12 13ip6tables-translate -A INPUT -m ah --ahspi 500 ! --ahlen 120 -j DROP 14nft 'add rule ip6 filter INPUT ah spi 500 ah hdrlength != 120 counter drop' 15 16ip6tables-translate -A INPUT -m ah --ahspi 500 --ahlen 120 --ahres -j ACCEPT 17nft 'add rule ip6 filter INPUT ah spi 500 ah hdrlength 120 ah reserved 1 counter accept' 18 19ip6tables-translate -A INPUT -m ah --ahspi 0:4294967295 20nft 'add rule ip6 filter INPUT exthdr ah exists counter' 21 22ip6tables-translate -A INPUT -m ah ! --ahspi 0:4294967295 23nft 'add rule ip6 filter INPUT ah spi != 0-4294967295 counter' 24