firewall: refine default ICMPv6 rules to better conform with RFC4890, do not forward...