Yes, iptables is installed as a dependency of Docker, but is not configured to do anything: $ iptables -L -v Chain INPUT (policy ACCEPT 2172 packets, 459K

Yes, iptables is installed as a dependency of Docker, but is not configured to do anything: $ iptables -L -v Chain INPUT (policy ACCEPT 2172 packets, 459K bytes) pkts bytes target prot opt in out source destination Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- any docker0 anywhere anywhere ctstate RELATED,ESTABLISHED 0 0 ACCEPT all -- docker0 !docker0 anywhere anywhere 0 0 ACCEPT all -- docker0 docker0 anywhere anywhere Chain OUTPUT (policy ACCEPT 2350 packets, 461K bytes) pkts bytes target prot opt in out source destination