[package] firewall: further tune ICMPv6 default rules according to RFC4890 (#9893)