Adding cgroups and one extra IPv6 netfilter line.