chain output-connectivity {
ip protocol icmp counter accept
- meta skuid 0 udp dport 33434-33523 counter accept comment "traceroute"
+ skuid root udp dport 33434-33523 counter accept comment "traceroute"
meta nfproto ipv6 meta l4proto ipv6-icmp jump accept-icmpv6