"Default deny" access entries need to be duplicated for IPv6