Thats the firewall solution for my dormitory. It cover user configurable, stateful IPv6 support with REJECT target using the USAGI patchset.