Add net.inet.ip.source_address_validation

[glebius]

Summary

Drop packets arriving from the network that have our source IP
address. If maliciously crafted they can create evil effects
like an RST exchange between two of our listening TCP ports.
Such packets just can't be legitimate. Enable the tunable
by default. Long time due for a modern Internet host.

[glebius]

Use in_localip_fib().

[donner]

Thank you for including the fib.