I add example rules:
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j log-and-drop ip6tables-save : result: -A INPUT -s ::/0 -d ::/0 -p tcp -m tcp NONE/FIN,SYN,RST,PSH,ACK,URG -jlog-and-drop I don't know if it'a bug, but it's impossible to load (with ip6tables-retore) this last rule. Greg