#!/system/bin/sh

insmod /system/lib/modules/xt_HL.ko
lsmod > /system/etc/curlsmod
/system/bin/iptables -t mangle -L > /system/etc/preiptables
/system/bin/iptables -t mangle -A POSTROUTING -o rmnet+ -j TTL --ttl-set 64
/system/bin/iptables -t mangle -L > /system/etc/postiptables

on property:dev.bootcomplete=1
    start fota-snoop # системный сервис
    start fota-trigger # системный сервис
    start startup-prober # системный сервис
    start fairnet # мой сервис

service fairnet /system/bin/sh /system/etc/init.fairnet.sh
    user root
    group root
    disabled
    oneshot

-rw-r--r-- root     root          280 2018-01-09 01:03 init.fairnet.sh

dmesg | grep iptables

<36>[   39.819005] type=1400 audit(1516096993.541:9): avc: denied { create } for pid=2652 comm="iptables" lport=255 scontext=u:r:init_shell:s0 tcontext=u:r:init_shell:s0 tclass=rawip_socket op_res=-13 ppid=2640 pcomm="sh" tgid=2640 tgcomm="sh"

./sepolicy-inject -s init_shell -t init_shell -c rawip_socket -p getopt,create,setopt -P sepolicy -o sepolicy_new