Alram The majority of ICMPv6 types including 135 are not stateful, therefore you must place rules to accept packets in both directions before you test for state INVALID. PIng type 128 is one that is stateful, that is why it works. Steven.