Support the ip rule add iif xx directive.
From the manpage:
iif NAME
select the incoming device to match. If the interface is loopback, the rule
only matches packets originating from this host. This means that you may create
separate routing tables for forwarded and local packets and, hence, completely
segregate them.