docs(config): Warn user that a trailing target=DROP rule is sensible

README.md

@@ -89,9 +89,11 @@ We strongly recommend you do keep the very last example section:
 target = DROP
 addr =
 ports =
-proto = 
+proto =
+state =
+do_ipv6 = true
 ```
-If a packet has traversed rules this far without being accepted it will be dropped.
+If a packet has traversed rules this far without being accepted it will be dropped. Note that if any of your custom `[sections]` use `do_ipv6 = true` your final `DROP` rule should do the same. Otherwise you'll just get `DROP` rule in `iptables` but not in `ip6tables`.
 
 ## Options
 

examples/config.ini.example

@@ -28,3 +28,5 @@ target = DROP
 addr =
 ports =
 proto =
+state =
+do_ipv6 = true