commit 25e561c47d1bad3f4edb9ee4c457b6254965db5e
author Maciej Żenczykowski <maze@google.com> Thu Oct 14 20:22:23 2021 -0700
committer Android Build Coastguard Worker <android-build-coastguard-worker@google.com> Fri Oct 15 11:55:05 2021 +0000
tree 7c671c07cab1211792eba3b292b33899fb1ab099
parent 4580b915386f585e72ce0afa567450c78d6f4d65

Never send packets with a source of ::1 on the wire.

Doing so is obviously invalid, and certain carriers will tear
down the connection if such packets are sent on their network.

This is done by adding an ip6tables rule to fw_OUTPUT that drops
all packets with a non-lo egress interface and a source of ::1.

Test: boot device, "adb root && adb shell ip6tables-save | egrep fw_OUTPUT"
Bug: 190368103
Bug: 198896920
Bug: 203096965
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Ifb272d48705ba756ccd7bac806e4dc2dd7488cd5
Merged-In: Ifb272d48705ba756ccd7bac806e4dc2dd7488cd5
(cherry picked from commit 350dbdb697eac51310e48044ed57933944617cd5)