Nothing prevents you to drop outward packets whose source don't match your fixed IP layout (e.g 2a01:whatever/126) In fact, you should do this to prevent spoof

Nothing prevents you to drop outward packets whose source don't match your fixed IP layout (e.g 2a01:whatever/126) In fact, you should do this to prevent spoofing attacks from being sourced from inside your network.