Wesley J. Landaker wrote:
3) Assuming the answer is to use xyz/6wall/ip6tables, are there any critical limitations I should be aware of? i.e. Are there known features/bugs/workarounds missing/added/required?
ip6tables has been around for a while, at least since 2.4.something, and basically works. Last I checked, though, it was only a stateless firewall.