Neighbour Advertisement should be allowed both ways, otherwise ipv6nd_sendadvertisement() from dhcpcd logs "Network is unreachable"
of boot, similar to what is currently available for PF.