thanks, bu what i do not understand is the fact, that v6-traffic (even the responses to http-requests) is completely blocked after successfully receiving a few echo-replys? if i modify ${IPT} -A INPUT -i ${INE_IFACE} -m state --state ESTABLISHED,RELATED -j ACCEPT ${IPT} -A INPUT -i ${INE_IFACE} -p icmpv6 -j ACCEPT --match limit --limit 10/minute everthing works fine.