The "rpfilter" example in the manpage is incomplete/broken.

On non-default interfaces, this set of rules breaks neighbor discovery
(which is done by multicast on IPv6).

At the very least, a rule allowing multicasts should be inserted before
the DROP.