This is a basic ipv6 implementation, I'll like that you review it before going further. I generate the ipv6 rules, passing a new param to PVE::Firewall::compile. the main idea is to generate both ipv4 and ipv6 rules from the same rules definitions. (and just skip ipv4 ip rules in ip6tables, and ipv6 ip rules in iptables)