23 lines
657 B
Plaintext
23 lines
657 B
Plaintext
-P INPUT ACCEPT
|
|
-P FORWARD DROP
|
|
-P OUTPUT ACCEPT
|
|
-N DOCKER
|
|
-N DOCKER-BRIDGE
|
|
-N DOCKER-CT
|
|
-N DOCKER-FORWARD
|
|
-N DOCKER-INTERNAL
|
|
-N DOCKER-USER
|
|
-N f2b-sshd
|
|
-A INPUT -p tcp -m multiport --dports 22 -j f2b-sshd
|
|
-A FORWARD -j DOCKER-USER
|
|
-A FORWARD -j DOCKER-FORWARD
|
|
-A DOCKER ! -i docker0 -o docker0 -j DROP
|
|
-A DOCKER-BRIDGE -o docker0 -j DOCKER
|
|
-A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
-A DOCKER-FORWARD -j DOCKER-CT
|
|
-A DOCKER-FORWARD -j DOCKER-INTERNAL
|
|
-A DOCKER-FORWARD -j DOCKER-BRIDGE
|
|
-A DOCKER-FORWARD -i docker0 -j ACCEPT
|
|
-A f2b-sshd -s 192.0.2.55/32 -j REJECT --reject-with icmp-port-unreachable
|
|
-A f2b-sshd -j RETURN
|