3 ms·
Until they learn that Docker adds iptable rules on their own and open every port automatically.
by k8sToGo 5y ago
Until they learn that Docker adds iptable rules on their own and open every port automatically.
- tfehring 5y agoEvery port on the machine, or every port on the container?
- remram 5y agoThe container's ports that you explicitly expose. E.g. `docker run -p 8080:80 nginx` will expose the container's port 80 as port 8080 on the host. That port will be open whether or not the host has a firewall configured to block 8080. You can do `docker run -p 127.0.0.1:8080:80 nginx` to only have the port on the host accessible on the loopback interface (for example if you have a reverse proxy on the host, proxying to 127.0.0.1:8080).
- tinco 5y agoI've been bitten by this, was a pain in the ass to figure out that something was messing with the iptables rules.
- HNTA0x0 5y agolaughs in Podman