56 lines
1.6 KiB
Plaintext
56 lines
1.6 KiB
Plaintext
-P INPUT ACCEPT
|
|
-P FORWARD ACCEPT
|
|
-P OUTPUT ACCEPT
|
|
-N DOCKER
|
|
-N DOCKER-BRIDGE
|
|
-N DOCKER-CT
|
|
-N DOCKER-FORWARD
|
|
-N DOCKER-INTERNAL
|
|
-N DOCKER-USER
|
|
-N ufw-after-forward
|
|
-N ufw-after-input
|
|
-N ufw-after-logging-forward
|
|
-N ufw-after-logging-input
|
|
-N ufw-after-logging-output
|
|
-N ufw-after-output
|
|
-N ufw-before-forward
|
|
-N ufw-before-input
|
|
-N ufw-before-logging-forward
|
|
-N ufw-before-logging-input
|
|
-N ufw-before-logging-output
|
|
-N ufw-before-output
|
|
-N ufw-reject-forward
|
|
-N ufw-reject-input
|
|
-N ufw-reject-output
|
|
-N ufw-track-forward
|
|
-N ufw-track-input
|
|
-N ufw-track-output
|
|
-A INPUT -j ufw-before-logging-input
|
|
-A INPUT -j ufw-before-input
|
|
-A INPUT -j ufw-after-input
|
|
-A INPUT -j ufw-after-logging-input
|
|
-A INPUT -j ufw-reject-input
|
|
-A INPUT -j ufw-track-input
|
|
-A FORWARD -j DOCKER-USER
|
|
-A FORWARD -j DOCKER-FORWARD
|
|
-A FORWARD -j ufw-before-logging-forward
|
|
-A FORWARD -j ufw-before-forward
|
|
-A FORWARD -j ufw-after-forward
|
|
-A FORWARD -j ufw-after-logging-forward
|
|
-A FORWARD -j ufw-reject-forward
|
|
-A FORWARD -j ufw-track-forward
|
|
-A OUTPUT -j ufw-before-logging-output
|
|
-A OUTPUT -j ufw-before-output
|
|
-A OUTPUT -j ufw-after-output
|
|
-A OUTPUT -j ufw-after-logging-output
|
|
-A OUTPUT -j ufw-reject-output
|
|
-A OUTPUT -j ufw-track-output
|
|
-A DOCKER -d 172.17.0.2/32 ! -i docker0 -o docker0 -p tcp -m tcp --dport 80 -j ACCEPT
|
|
-A DOCKER ! -i docker0 -o docker0 -j DROP
|
|
-A DOCKER-BRIDGE -o docker0 -j DOCKER
|
|
-A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
-A DOCKER-FORWARD -j DOCKER-CT
|
|
-A DOCKER-FORWARD -j DOCKER-INTERNAL
|
|
-A DOCKER-FORWARD -j DOCKER-BRIDGE
|
|
-A DOCKER-FORWARD -i docker0 -j ACCEPT
|