You would normally have to explicitly unfirewall any service; I run my ipv6 as inbound ssh only. Although crawling ipv6 is pretty hard compared to ipv4.