OEM VPNs might need to receive packets to VPN address via non-VPN interface. Bug: 352424251 Test: CsIngressDiscardRuleTest Change-Id: Ia9000bcbb5b3b9e1e0d396ba78946be36e2fc5ba