firewall: allow DHCPv6 traffic to/from fc00::/6 instead of fe80::/10