Filter packets based on the "next header" content of the IPv6 header: ``` rule ipv6.nexthdr eq frag DROP rule ipv6.nexthdr in {route, prot} counter DROP ```