Are there any nwfilter rules out there for IPv6? I'm looking for something similar to clean-traffic, but that works with IPv6. I found some mailing list posts from 2012 ( https://www.redhat.com/archives/libvirt-users/2012-November/msg00039.html ), but they don't seem to actually go anywhere. The hard part here seems to be determining all the different ways IPv6 traffic can be bad.