tree 163a8c55611b9a6ff208bbde5c5372e3b0fe7667
parent 22917c05e089302feb888ed8acae15fe566b9727
author Will Angley <willangley@google.com> 1484353952 -0500
committer Will Angley <willangley@google.com> 1484376671 -0500

firewall: specify interfaces for rules explicitly.

When `firewall` was first written, all of the network interfaces on a
Network Box were either ephemeral (GFiberSetup) or trusted, and implying
them seemed like a good idea at the time.

This isn't true any more; both autoprovisioning networks and Fiber
Managed WiFi serve fundamentally untrusted devices, and need to isolate
them from mutually trusting devices on the private network.

Fixes b/33678893, b/31933763.

Change-Id: I403ddb9ad754a6c88cbe3a5e0b3608c915ff226e