pass out all with v6hdrs routing
block out proto tcp all with v6hdrs routing