nat-fw: allow all input icmpv6 for neighbor discovery