correctly emit ipv6 rules for host firewall