gatekeeper:/var/log # ip6tables -L -v
Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 1528  126K ACCEPT     all      lo     any     anywhere             anywhere            
38293   39M ACCEPT     all      any    any     anywhere             anywhere            CONFIRMED match 
    0     0 CONFIRMED  all      any    any     anywhere             anywhere            ctstate RELATED 
 3634  327K PSD_MATCH  all      any    any     anywhere             anywhere            
 3634  327K SANITY_CHECKS  all      any    any     anywhere             anywhere            
 3634  327K AUTO_INPUT  all      any    any     anywhere             anywhere            
   94  6479 USR_INPUT  all      any    any     anywhere             anywhere            
   94  6479 LOGDROP    all      any    any     anywhere             anywhere            LOGMARK match 60001 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 107K   92M ACCEPT     all      any    any     anywhere             anywhere            CONFIRMED match 
    0     0 CONFIRMED  all      any    any     anywhere             anywhere            ctstate RELATED 
  711 52932 PSD_MATCH  all      any    any     anywhere             anywhere            
  711 52932 SANITY_CHECKS  all      any    any     anywhere             anywhere            
  711 52932 AUTO_FORWARD  all      any    any     anywhere             anywhere            
  705 52564 USR_FORWARD  all      any    any     anywhere             anywhere            
  246 21352 LOGDROP    all      any    any     anywhere             anywhere            LOGMARK match 60002 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOGDROP    tcp      any    lo     !ip6-localhost/128    anywhere            tcp spts:1024:65535 dpt:webadmin LOGMARK match 60005 
  624 51636 ACCEPT     all      any    lo      anywhere             anywhere            
10410 1221K ACCEPT     all      any    any     anywhere             anywhere            CONFIRMED match 
    0     0 CONFIRMED  all      any    any     anywhere             anywhere            ctstate RELATED 
 1662  106K SANITY_CHECKS  all      any    any     anywhere             anywhere            
 1662  106K AUTO_OUTPUT  all      any    any     anywhere             anywhere            
    0     0 USR_OUTPUT  all      any    any     anywhere             anywhere            
    0     0 LOGDROP    all      any    any     anywhere             anywhere            LOGMARK match 60003 

Chain AUTO_FORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CONFIRMED  udp      any    any     anywhere             anywhere            udp spts:1024:65535 dpts:33000:34000 
    2   160 CONFIRMED  ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 128 code 0 
    0     0 CONFIRMED  ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 129 code 0 

Chain AUTO_INPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CONFIRMED  tcp      any    any     2001:5c0:1106:4900::/64  anywhere            tcp spts:tcpmux:65535 dpt:ssh 
    0     0 LOGDROP    tcp      any    any     anywhere             anywhere            tcp spts:tcpmux:65535 dpt:ssh LOGMARK match 60004 
    0     0 CONFIRMED  tcp      any    any     2001:5c0:1106:4900::/64  anywhere            tcp spts:1024:65535 dpt:webadmin 
    0     0 LOGDROP    tcp      any    any     anywhere             anywhere            tcp spts:1024:65535 dpt:webadmin LOGMARK match 60005 
    7  1253 CONFIRMED  udp      eth1   any     anywhere             anywhere            udp spts:tcpmux:65535 dpt:dhcpv6-server 
    0     0 CONFIRMED  tcp      any    any     2001:5c0:1106:4900::/64  anywhere            tcp spts:domain:65535 dpt:domain 
  237 19644 CONFIRMED  udp      any    any     2001:5c0:1106:4900::/64  anywhere            udp spts:domain:65535 dpt:domain 
    0     0 CONFIRMED  tcp      any    any     2001:5c0:1106:4900::/64  anywhere            tcp spts:tcpmux:65535 dpt:http-alt 
    0     0 ACCEPT     ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp destination-unreachable 
    0     0 ACCEPT     ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 2 code 0 
    0     0 ACCEPT     ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp time-exceeded 
    0     0 ACCEPT     ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp parameter-problem 
    0     0 CONFIRMED  ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 135 code 0 
    0     0 CONFIRMED  ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 136 code 0 
    0     0 DROP       ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 143 code 0 
    0     0 ACCEPT     ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 134 code 0 
    0     0 ACCEPT     ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 133 code 0 
    0     0 CONFIRMED  ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 128 code 0 
    0     0 CONFIRMED  udp      any    any     2001:5c0:1106:4900::/64  anywhere            udp spts:ntp:65535 dpt:ntp 
    0     0 CONFIRMED  tcp      any    any     2001:5c0:1106:4900::/64  anywhere            tcp spts:tcpmux:65535 dpt:scientia-ssdb ctstate DNAT 
    0     0 REJECT     tcp      any    any     anywhere             anywhere            tcp spts:tcpmux:65535 dpt:ident reject-with icmp6-port-unreachable 
    0     0 CONFIRMED  tcp      any    any     anywhere             anywhere            tcp spts:tcpmux:65535 multiport dports smtp,smtps,submission 

Chain AUTO_OUTPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    7  1064 CONFIRMED  udp      any    eth1    anywhere             anywhere            udp spts:tcpmux:65535 dpt:dhcpv6-client 
    0     0 CONFIRMED  tcp      any    any     anywhere             anywhere            tcp spts:domain:65535 dpt:domain 
    1   104 CONFIRMED  udp      any    any     anywhere             anywhere            udp spts:domain:65535 dpt:domain 
    0     0 CONFIRMED  udp      any    any     anywhere             anywhere            udp spt:domain dpts:domain:65535 
    0     0 CONFIRMED  tcp      any    any     anywhere             anywhere            tcp spts:tcpmux:65535 dpt:webadmin 
    0     0 CONFIRMED  tcp      any    any     anywhere             anywhere            tcp spts:tcpmux:65535 dpt:ftp 
    7   552 CONFIRMED  tcp      any    any     anywhere             anywhere            tcp spts:tcpmux:65535 dpt:http 
    0     0 CONFIRMED  tcp      any    any     anywhere             anywhere            tcp spts:tcpmux:65535 dpt:https 
    0     0 CONFIRMED  tcp      any    any     anywhere             anywhere            tcp spts:tcpmux:65535 dpt:http 
    0     0 CONFIRMED  udp      any    any     anywhere             anywhere            udp spts:1024:65535 dpts:33000:34000 
    0     0 ACCEPT     ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp destination-unreachable 
    0     0 ACCEPT     ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 2 code 0 
    0     0 ACCEPT     ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp time-exceeded 
    0     0 ACCEPT     ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp parameter-problem 
    0     0 CONFIRMED  ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 135 code 0 
    0     0 CONFIRMED  ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 136 code 0 
    0     0 DROP       ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 143 code 0 
    0     0 ACCEPT     ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 133 code 0 
    0     0 ACCEPT     ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 134 code 0 
  104  5824 CONFIRMED  ipv6-icmp    any    any     anywhere             anywhere            ipv6-icmp type 128 code 0 
    0     0 CONFIRMED  tcp      any    any     anywhere             anywhere            tcp spts:1024:65535 dpts:tcpmux:65535 
    0     0 CONFIRMED  tcp      any    any     anywhere             anywhere            tcp spts:tcpmux:65535 multiport dports smtp,smtps,submission 
    0     0 CONFIRMED  tcp      any    any     anywhere             anywhere            tcp spts:tcpmux:65535 dpt:http 
    0     0 CONFIRMED  all      any    any     anywhere             anywhere            owner UID match snort owner GID match snort 

Chain HA (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain INVALID_PKT (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 NFLOG      all      any    any     anywhere             anywhere            LOGMARK match 60007 nflog-prefix "INVALID_PKT: " 
    0     0 DROP       all      any    any     anywhere             anywhere            

Chain LOGACCEPT (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  459 31212 NFLOG      all      any    any     anywhere             anywhere            nflog-prefix "ACCEPT: " 
  459 31212 CONFIRMED  all      any    any     anywhere             anywhere            

Chain LOGDROP (6 references)
 pkts bytes target     prot opt in     out     source               destination         
  359 29567 NFLOG      all      any    any     anywhere             anywhere            nflog-prefix "DROP: " 
  359 29567 DROP       all      any    any     anywhere             anywhere            

Chain LOGREJECT (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 NFLOG      all      any    any     anywhere             anywhere            nflog-prefix "REJECT: " 
    0     0 REJECT     all      any    any     anywhere             anywhere            reject-with icmp6-port-unreachable 

Chain PSD_ACTION (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain PSD_MATCH (2 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain SANITY_CHECKS (3 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain STRICT_TCP_STATE (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain USR_FORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    7   476 LOGACCEPT  tcp      any    any     2001:5c0:1106:4900::/64  anywhere            tcp spts:tcpmux:65535 dpt:http LOGMARK match 4 

Chain USR_INPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain USR_OUTPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination         