tree 7c671c07cab1211792eba3b292b33899fb1ab099
parent a44df5f931c3deb75bf0310d5c20121f63c498a8
author Maciej Żenczykowski <maze@google.com> 1634268143 -0700
committer Maciej Żenczykowski <maze@google.com> 1634287562 -0700

Never send packets with a source of ::1 on the wire.

Doing so is obviously invalid, and certain carriers will tear
down the connection if such packets are sent on their network.

This is done by adding an ip6tables rule to fw_OUTPUT that drops
all packets with a non-lo egress interface and a source of ::1.

Test: boot device, "adb root && adb shell ip6tables-save | egrep fw_OUTPUT"
Bug: 190368103
Bug: 198896920
Bug: 203096965
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Ifb272d48705ba756ccd7bac806e4dc2dd7488cd5
Merged-In: Ifb272d48705ba756ccd7bac806e4dc2dd7488cd5