removing cruft
functional (but too permissive) IPv6 rules