the name ipproto is confusing here, normally it refers to TCP, UDP, etc. Here it seems to indicate ipv4,ipv6. Maybe use ipver.