nat: Basic IPv6 firewall