add drop invalid rst 1.12

[changluyi]

Pull Request

• Make sure you have followed Kube-OVN Code Style.

What type of this PR

Examples of user facing changes:

• Features
• Bug fixes
• Docs
• Tests

Which issue(s) this PR fixes

Fixes #(issue-number)

WHAT

🤖[deprecated] Generated by Copilot at 674b3ac

Add iptables rules to protect pod subnets from TCP RST attacks and refactor setIptables function in gateway_linux.go

🤖[deprecated] Generated by Copilot at 674b3ac

To protect pods from TCP RST
This pull request adds to the quest
It updates setIptables
With rules for MANGLE
And separates it from NAT at best

HOW

🤖[deprecated] Generated by Copilot at 674b3ac

• Add iptables rules to drop TCP RST packets from OVN subnets with invalid state (link, link)
• Declare a variable to store iptables rules for the MANGLE table and the OvnPostrouting chain (link)
• Filter and append iptables rules for the MANGLE table and the OvnPostrouting chain to the variable (link)
• Update the iptables chain for the MANGLE table and the OvnPostrouting chain with the variable (link)

[oilbeater]

Suggested change

	var natPreroutingRules, natPostroutingRules, ovnMasqueradeRules, manglePostrutingRules []util.IPTableRule
	var natPreroutingRules, natPostroutingRules, ovnMasqueradeRules, manglePostroutingRules []util.IPTableRule

[changluyi]

1