Comment 1 for bug 1818960

I think that rule will get added when a prefix-delegated subnet is added to the external interface, or when you add a prefix from a configured address pool. I don't think modifying that code is exactly correct at first glance.

Maybe you can describe more details about your config so we can re-create it?