Adding a rule such as this: -A INPUT -p ipv6-icmp -m icmpv6 ends up creating a rule with "ipv6-icmp type 0", instead of "ipv6-icmp type any" which is what was expected. Granted, the match is redundant anyway, but it should not assume a specific type when one is not specified. Below patches (to both kernel and userspace) fix this, and resolve bug #461. In keeping with icmpv4, 0xFF is used to designate "any". And since I was looking at it, I fixed up a 255 -> any in icmpv4 printing. Phil Signed-off-by: Phil Oester