I believe my configuration is correct, and that the geoip databases are set up correctly. Matching correctly works on ipv4 with an equivalent iptables.
I have tried exhaustively to get xt_geoip to match ipv6 addresses, and
it doesn't.