This is actually just backporting #288 to the ip6tables provider, but isn't part of the boolean fix.