firewall: - fix ip6tables rules when icmp_type option is set - add "family" option...