limit ip6tables operations when it is active

check that there's a scope on the default ipv6 interface and that it is global