diff --git a/firewall/interception/nfq/nfq.go b/firewall/interception/nfq/nfq.go
index f4f0fe99..b22e125a 100644
--- a/firewall/interception/nfq/nfq.go
+++ b/firewall/interception/nfq/nfq.go
@@ -216,6 +216,10 @@ func (q *Queue) packetHandler(ctx context.Context) func(nfqueue.Attribute) int {
 
 // Destroy destroys the queue. Any error encountered is logged.
 func (q *Queue) Destroy() {
+	if q == nil {
+		return
+	}
+
 	q.cancelSocketCallback()
 
 	if nf := q.getNfq(); nf != nil {
diff --git a/firewall/interception/nfqueue_linux.go b/firewall/interception/nfqueue_linux.go
index 11ce9d9c..31a7f66b 100644
--- a/firewall/interception/nfqueue_linux.go
+++ b/firewall/interception/nfqueue_linux.go
@@ -103,12 +103,12 @@ func init() {
 
 		"filter C17 -m mark --mark 0 -j DROP",
 		"filter C17 -m mark --mark 1700 -j RETURN",
-		"filter C17 -m mark --mark 1701 -p icmp6 -j RETURN",
+		"filter C17 -m mark --mark 1701 -p icmpv6 -j RETURN",
 		"filter C17 -m mark --mark 1701 -j REJECT --reject-with icmp6-adm-prohibited",
 		"filter C17 -m mark --mark 1702 -j DROP",
 		"filter C17 -j CONNMARK --save-mark",
 		"filter C17 -m mark --mark 1710 -j RETURN",
-		"filter C17 -m mark --mark 1711 -p icmp6 -j RETURN",
+		"filter C17 -m mark --mark 1711 -p icmpv6 -j RETURN",
 		"filter C17 -m mark --mark 1711 -j REJECT --reject-with icmp6-adm-prohibited",
 		"filter C17 -m mark --mark 1712 -j DROP",
 		"filter C17 -m mark --mark 1717 -j RETURN",