narrower scoping of null_block_substanza with ip/ipv6