Since ICMP6 is (mostly) allowed through by default, can we also have traceroute6 allowed?
ACCEPT udp ::/0 ::/0 udp dpts:33434:33523 state NEW
DROP udp ::/0 ::/0 udp dpts:33434:33523 state ESTABLISHED
Can 'Port Forwarding IPv6' be renamed to 'Allowed IPv6 traffic' or something? It's not strictly port forwarding, right? ;)