Add "iif lo" to all IP rules for originated traffic.
This ensures that these rules are not mistakenly used by forwarded traffic. Forwarded traffic should only use rules that specify an explicit iif. The rules change as follows: 0: from all lookup local 10000: from all fwmark 0xc0000/0xd0000 lookup legacy_system 10500: from all {+iif lo+} oif dummy0 uidrange 0-0 lookup dummy0 10500: from all {+iif lo+} oif wlan0 uidrange 0-0 lookup wlan0 10500: from all {+iif lo+} oif v4-wlan0 uidrange 0-0 lookup v4-wlan0 10500: from all {+iif lo+} oif rmnet_data0 uidrange 0-0 lookup rmnet_data0 13000: from all fwmark 0x10063/0x1ffff {+iif lo+} lookup local_network 13000: from all fwmark 0x10065/0x1ffff {+iif lo+} lookup wlan0 13000: from all fwmark 0x10065/0x1ffff {+iif lo+} lookup v4-wlan0 13000: from all fwmark 0x50064/0x5ffff {+iif lo+} lookup rmnet_data0 14000: from all {+iif lo+} oif dummy0 lookup dummy0 14000: from all {+iif lo+} oif wlan0 lookup wlan0 14000: from all {+iif lo+} oif v4-wlan0 lookup v4-wlan0 14000: from all fwmark 0x40000/0x40000 {+iif lo+} oif rmnet_data0 lookup rmnet_data0 15000: from all fwmark 0x0/0x10000 lookup legacy_system 16000: from all fwmark 0x0/0x10000 lookup legacy_network 17000: from all fwmark 0x0/0x10000 lookup local_network 19000: from all fwmark 0x65/0x1ffff {+iif lo+} lookup wlan0 19000: from all fwmark 0x65/0x1ffff {+iif lo+} lookup v4-wlan0 22000: from all fwmark 0x0/0xffff {+iif lo+} lookup v4-wlan0 22000: from all fwmark 0x0/0xffff {+iif lo+} lookup wlan0 32000: from all unreachable Bug: 64976379 Bug: 73642792 Bug: 73032258 Test: marlin builds, boots, networking works Test: IPv4/v6 USB tethering works concurrently with httpurl --nethandle <foo> Test: USB tethering correctly able to use non-default-network upstream Test: T-Mobile wifi calling works on walleye internal build Change-Id: I9383a7ea54c60b0f33db8de8c6331e2f820539e1
Loading
Please register or sign in to comment