diff --git a/iptables/rules6.conf b/iptables/rules6.conf
index 12fa596..30a24a1 100644
--- a/iptables/rules6.conf
+++ b/iptables/rules6.conf
@@ -6,14 +6,13 @@
 :FILTERS - [0:0]
 -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
 -A INPUT -i lo -j ACCEPT
+-A INPUT -m conntrack --ctstate INVALID -j DROP
 -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 128 -m limit --limit 5/sec -j ACCEPT
 -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 133 -m limit --limit 5/sec -j ACCEPT
 -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 134 -m limit --limit 5/sec -j ACCEPT
 -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 135 -m limit --limit 5/sec -j ACCEPT
 -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 136 -m limit --limit 5/sec -j ACCEPT
--A INPUT -m conntrack --ctstate INVALID -j DROP
 -A INPUT -j FILTERS
--A INPUT -j REJECT
 -A OUTPUT -o lo -j ACCEPT
 -A OUTPUT -o ens3 -j ACCEPT
 -A DOCKER-USER -i ens3 -j FILTERS