<filter name='allow-incoming-ipv6' chain='ipv6'>
  <rule direction='in' action='accept'/>
</filter>
