I have a Debian 11 VPS on a cloud provider, with both IPv4 and IPv6 enabled and the eth0 interface with both a global-scoped ipv6 address (public) and a link-scoped ipv6 address (fe80::/10).

The sole purpose of the server is to host a public website.

I’m implementing a firewall on the server using iptables/ip6tables. I read RFC4890 but still not sure how to handle some ICMPv6 message types and if they are really needed for my use case.
Whereas I am permitting any traffic on the link-scoped, **I am not sure if I can safely block the following ICMPv6 message types** on the *global-scoped*:

* Router Solicitation (Type 133)
* Router Advertisement (Type 134)
* Neighbor Solicitation (Type 135)
* Neighbor Advertisement (Type 136)
* Inverse Neighbor Discovery Solicitation (Type 141)
* Inverse Neighbor Discovery Advertisement (Type 142)
* Listener Query (Type 130)
* Listener Report (Type 131)
* Listener Done (Type 132)
* Listener Report v2 (Type 143)
* Certificate Path Solicitation (Type 148)
* Certificate Path Advertisement (Type 149)
* Multicast Router Advertisement (Type 151)
* Multicast Router Solicitation (Type 152)
* Multicast Router Termination (Type 153)

Many thanks for any help.