Block incoming ipv6 to clients
This will stop incoming traffic from coming into ipv6 clients.
It also cleans up the jinja filters, and switches from MASQUERAD to SNAT
iptables-extensions(8):
MASQUERADE ... should only be used with dynamically assigned IP (dialup) connections: if you have a static IP address, you should use the SNAT target.