Okey, when I put this rule in my default group % group default { % pass final family inet6 all % block all % } telnet can connect But if I put 'pass stateful final family inet6 all', telnet is blocked. Does it look like a bug?