sorry! the comment at the end of line 68 is not needed
ip6firewall enable_at_boot in debian
firewall6
sorry! "packet-too-big"
in module firewall6 icmp-type should be called icmpv6-type