> How do you implement a IPv6 firewall which keeps all of China and Russia out of your network?

You do this by blocking the IP ranges that are assigned to China and Russia. Same as you would with IPv4, why would that change?

Also, tcp_tw_recycle when set for IPv4 also applies for IPv6, despite the name...