Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit 758627c4 authored by Lorenzo Colitti's avatar Lorenzo Colitti
Browse files

Add "iif lo" to all IP rules for originated traffic.

This ensures that these rules are not mistakenly used by
forwarded traffic. Forwarded traffic should only use rules that
specify an explicit iif.

The rules change as follows:

0:	from all lookup local
10000:	from all fwmark 0xc0000/0xd0000 lookup legacy_system
10500:	from all {+iif lo+} oif dummy0 uidrange 0-0 lookup dummy0
10500:	from all {+iif lo+} oif wlan0 uidrange 0-0 lookup wlan0
10500:	from all {+iif lo+} oif v4-wlan0 uidrange 0-0 lookup v4-wlan0
10500:	from all {+iif lo+} oif rmnet_data0 uidrange 0-0 lookup rmnet_data0
13000:	from all fwmark 0x10063/0x1ffff {+iif lo+} lookup local_network
13000:	from all fwmark 0x10065/0x1ffff {+iif lo+} lookup wlan0
13000:	from all fwmark 0x10065/0x1ffff {+iif lo+} lookup v4-wlan0
13000:	from all fwmark 0x50064/0x5ffff {+iif lo+} lookup rmnet_data0
14000:	from all {+iif lo+} oif dummy0 lookup dummy0
14000:	from all {+iif lo+} oif wlan0 lookup wlan0
14000:	from all {+iif lo+} oif v4-wlan0 lookup v4-wlan0
14000:	from all fwmark 0x40000/0x40000 {+iif lo+} oif rmnet_data0 lookup rmnet_data0
15000:	from all fwmark 0x0/0x10000 lookup legacy_system
16000:	from all fwmark 0x0/0x10000 lookup legacy_network
17000:	from all fwmark 0x0/0x10000 lookup local_network
19000:	from all fwmark 0x65/0x1ffff {+iif lo+} lookup wlan0
19000:	from all fwmark 0x65/0x1ffff {+iif lo+} lookup v4-wlan0
22000:	from all fwmark 0x0/0xffff {+iif lo+} lookup v4-wlan0
22000:	from all fwmark 0x0/0xffff {+iif lo+} lookup wlan0
32000:	from all unreachable

Bug: 64976379
Bug: 73642792
Bug: 73032258
Test: marlin builds, boots, networking works
Test: IPv4/v6 USB tethering works concurrently with httpurl --nethandle <foo>
Test: USB tethering correctly able to use non-default-network upstream
Test: T-Mobile wifi calling works on walleye internal build
Change-Id: I9383a7ea54c60b0f33db8de8c6331e2f820539e1
parent 02b6d17b
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment