[package] firewall: don't apply default udp/68 rule to ip6tables