question about firewall ipv6 icmp

[DonnyJohnny]

Hi,

I just want to harden the ipv6 table.
I am reading on
https://github.com/CERTCC-Vulnerability-Analysis/ip6tables-configuration/blob/master/firewall_rules5

I wanted to add the following to iptables

# Allow some others ICMPv6 types but only if the hop limit field is 255.
# We're still in the INPUT chain. Types can be listed by name (ip6tables -p ipv6-icmp -h).

ip6tables -A INPUT -p icmpv6 --icmpv6-type router-advertisement -m hl --hl-eq 255 -j ACCEPT
ip6tables -A INPUT -p icmpv6 --icmpv6-type 141 -m hl --hl-eq 255 -j ACCEPT
ip6tables -A INPUT -p icmpv6 --icmpv6-type 142 -m hl --hl-eq 255 -j ACCEPT
ip6tables -A INPUT -p icmpv6 --icmpv6-type 151 -m hl --hl-eq 255 -j ACCEPT

However, i encountered the following error message
" ip6tables: No chain/target/match by that name. "

It seems like the ip6tables unable to use the hop limit. Can someone advise me on how to get this to work.

Thanks

 

[DonnyJohnny]

Anyone?