Search results

Don't know, that containerization is OS-level virtualization. You're right.

With VMware Workstation these rules work fine, however, it doesn't use nat and forward for work. Docker is not virtualization. And it adds its own rules to the firewall: But I think the problem within conntrack, which not tracking state for forward. If I add the state "new", all work fine...

Hi everyone. I am setting up my firewall and want to close services, which open in docker too, in one place. So, my rules look like this: nft add table inet PREROUTING nft 'add chain inet PREROUTING lower_filter { type filter hook prerouting priority -130; policy drop; }' nft add rule inet...