commit 29af3e3f6aa440191453196c827b11eafef18e68
author Maciej Żenczykowski <maze@google.com> Thu Oct 14 20:22:23 2021 -0700
committer Patrick Rohr <prohr@google.com> Thu Oct 21 15:38:08 2021 +0000
tree 99010d1af509aef47f6ada888ecc3ab119cc111f
parent 27f6b42bfa988cb7e62f000c67f8b18734e78c65

DO NOT MERGE: Never send packets with a source of ::1 on the wire.

Doing so is obviously invalid, and certain carriers will tear
down the connection if such packets are sent on their network.

This is done by adding an ip6tables rule to fw_OUTPUT that drops
all packets with a non-lo egress interface and a source of ::1.

Test: boot device, "adb root && adb shell ip6tables-save | egrep fw_OUTPUT"
Bug: 190368103
Bug: 198896920
Bug: 203096965
Bug: 203581568
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Ifb272d48705ba756ccd7bac806e4dc2dd7488cd5
(cherry picked from commit 344bb894d2dbdffcd1635685e6dce32bfd35206b)