Thank you for the example. I rarely change my configuration, so it always takes some time to figure out how to do it.
I had to use another address (mine was on 2a01:578:3::/48), so to be sure I put these addresses that someone posted on reddit:
2a01:578:3::/48
2406:da00:ff00::/48
2600:1407:19::/48
2607:f8b0:4001::/48
2620:108:700f::/48
But it is a shame to have to block IPV6 addresses. As far as I know, I have not "benefited" from the tunnel in any way (I'm on the Stockholm endpoint) other than to have the IPV6 space. Netflix has shown the same content on both IPV4 and IPV6, so clearly they have some kind of working geoip system in place. Some time ago (maybe 1.5 years ago) there were some occasional glitches, so that suddenly only US content was visible on IPV6, but that was horribly slow and no nice experience. Luckily they fixed it and it has worked fine ever since. So I don't understand the reason for disabling IPV6 tunnels.