#!/bin/sh
# network	: ipv4.ipv4.ipv4.ipv4/mask || dns/mask
# Only intranet
local network="$network;${net6}"

# ruleOut	: iptables -t filter -A OUTPUT   -o ""$eth"" -j ""$rulesOut""
# ruleIn	: iptables -t filter -A INPUT    -i ""$eth"" -j ""$rulesIn""
# dropOut	: iptables -t filter -A OUTPUT   -o ""$eth"" -j ""$rulesOut""
# dropIn	: iptables -t filter -A INPUT    -i ""$eth"" -j ""$rulesIn""

#NETFILTER6_INPUTIN=internet0 OUT= MAC=33:33:00:00:00:01:b4:9d:fd:18:bf:d1:86:dd SRC=fe80:0000:0000:0000:0000:0000:0000:0001
# DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=72 TC=0 HOPLIMIT=1 FLOWLBL=0 OPT ( ) PROTO=ICMPv6 TYPE=130 CODE=0

# === TYPE 135 : Neighbor Solicitation ===
#NETFILTER6_INPUTIN=eth0 OUT= MAC=00:1b:11:64:04:75:b4:9d:fd:18:bf:d1:86:dd SRC=fe80:0000:0000:0000:0000:0000:0000:0001
#DST=2a02:842a:285a:9201:021b:11ff:fe64:0475 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 MARK=0x11
local  icmpIn="$icmpIn ;icmp	| -s "${gw6}/128" -d "${ip6}/128"	-p icmpv6 --icmpv6-type 135/0 -m hl --hl-eq 255"

# === TYPE 136 : Neighbor Advertisement ===
#NETFILTER6_OUTPUTIN= OUT=eth1 SRC=fec0:0010:0090:0006:0000:0000:0000:0002
# DST=fe80:0000:0000:0000:aef1:dfff:fe79:24fe LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=136 CODE=0 MARK=0x14
#NETFILTER6_OUTPUTIN= OUT=eth0 SRC=2a02:842a:285a:9201:021b:11ff:fe64:0475
# DST=fe80:0000:0000:0000:0000:0000:0000:0001 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=136 CODE=0 MARK=0xb
#NETFILTER6_OUTPUTIN= OUT=eth0 SRC=2a02:842a:285a:9201:021b:11ff:fe64:0475
# DST=fe80:0000:0000:0000:0000:0000:0000:0001 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=136 CODE=0 MARK=0xd
#NETFILTER6_OUTPUTIN= OUT=inbox0 SRC=2a01:cb10:8ba1:9d00:0218:8bff:fe8f:48eb
# DST=fe80:0000:0000:0000:7ec1:77ff:feeb:e7e0 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=136 CODE=0 MARK=0xa
#NETFILTER6_OUTPUTIN= OUT=eth0 SRC=fec0:0010:0090:0006:0000:0000:0000:0010
# DST=fe80:0000:0000:0000:0213:20ff:fe16:6a85 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=136 CODE=0 MARK=0xc
#NETFILTER6_OUTPUTIN= OUT=enx2887ba045465 SRC=2001:0861:2d31:4120:2a87:baff:fe04:5465
# DST=fe80:0000:0000:0000:d25a:00ff:fe4c:f82c LEN=64 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=136 CODE=0 MARK=0x17
local icmpOut="$icmpOut ;icmp	| -s "${ip6}/128" -d "${gw6}/128"	-p icmpv6 --icmpv6-type 136/0 -m hl --hl-eq 255"

#NETFILTER6_INPUTIN=internet0 OUT= MAC=00:1b:11:64:04:75:b4:9d:fd:18:bf:d1:86:dd SRC=fe80:0000:0000:0000:0000:0000:0000:0001
# DST=2a02:842a:285a:9201:021b:11ff:fe64:0475 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=136 CODE=0 MARK=0xc
local  icmpIn=" $icmpIn ;icmp	| -s "${gw6}/128" -d "${ip6}/128"	-p icmpv6 --icmpv6-type 136/0 -m hl --hl-eq 255"

# === TYPE 137 : Redirect ===
#NETFILTER6_INPUTIN=outbox0 OUT= MAC=ac:f1:df:79:24:fe:00:13:20:16:6a:85:86:dd SRC=fe80:0000:0000:0000:0213:20ff:fe16:6a85
# DST=fec0:0010:0090:0006:0000:0000:0000:0001 LEN=200 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=137 CODE=0 MARK=0x13
#NETFILTER6_INPUTIN=macvlan1 OUT= MAC=30:d3:05:df:fa:f2:00:18:8b:8f:48:eb:86:dd SRC=fe80:0000:0000:0000:0218:8bff:fe8f:48eb
# DST=fec0:0010:0090:0006:0000:0000:0000:0090 LEN=152 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=137 CODE=0 MARK=0x29
local  icmpIn=" $icmpIn ;icmp	| -s "${gw6}/128" -d "${ip6}/128"	-p icmpv6 --icmpv6-type 137/0 -m hl --hl-eq 255"