3 ms·
Use the new rootless mode and you won’t have issues with it inserting it’s rules above UFW. You can then expose ports to a specific IP and use UFW to allow it.
by rbut 5y ago
Use the new rootless mode and you won’t have issues with it inserting it’s rules above UFW.
You can then expose ports to a specific IP and use UFW to allow it.
Much cleaner than any UFW-docker hacks out there, and more secure.
https://docs.docker.com/engine/security/rootless/ https://docs.docker.com/engine/security/rootless/
- sascha_sl 5y agoThe real workaround has always been to disable iptables and masq in the docker daemon and set up those things yourself, with your existing firewall. Binding your port to loopback works too, but that's more prone to accidents.