add icmp6 rule as well when adding a firewall rule for icpm
Adding a firewall rule to allow icmp inbound does not create an according rule for icmp6:
$ ipfstat -6 -nio -G 0570b246-1b0f-456d-a8ac-386ace7ba6e6
@1 pass out quick proto tcp from ::/0 to ::/0 flags S/SA keep state
@2 pass out proto tcp from ::/0 to ::/0
@3 pass out proto udp from ::/0 to ::/0 keep state
@4 pass out quick proto ipv6-icmp from ::/0 to ::/0 keep state
@5 pass out proto ipv6-icmp from ::/0 to ::/0
@3 block in all
No "pass in" rules for ipv6.-icmp.
$ ipfstat -nio -G 0570b246-1b0f-456d-a8ac-386ace7ba6e6
...
@2 pass in quick proto icmp from any to any icmp-type echo code 0
@9 pass in quick proto icmp from any to any icmp-type echorep code 0
...