553
Context: Docker bypasses all UFW firewall rules (lemmy.world)
submitted 1 year ago* by to c/programmer_humor@programming.dev
104 comments fedilink hide all child comments
 

Docker docs:

Docker routes container traffic in the nat table, which means that packets are diverted before it reaches the INPUT and OUTPUT chains that ufw uses. Packets are routed before the firewall rules can be applied, effectively ignoring your firewall configuration.

you are viewing a single comment's thread
view the rest of the comments
[–] 17 points 1 year ago (1 child)

network: host gives the container basically full access to any port it wants. But even with other network modes you need to be careful, as any -p <external port>:<container port> creates the appropriate firewall rule automatically.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •