adds deny base policy for ip6tables