depends on #8997
- enable/disable ipv6 package rejection based on: in-app ipv6 settings, connection type and root permissions
by default the openvpn flag tcp should let openvpn do the fallback handling for failing ipv6 connections (in openvpn 2.4+)
we need to figure out if the app can recognize a failing ipv6 connection if openvpn does the fallback handling. We need a notification/callback so that the app can adapt the firewall accordingly.
otherwise we need separate configurations using explicitely tcp4 and tcp6 which would complicate things unnecessarily