Post #4327608

TIL if you use iptables together with ufw and Docker, by default Docker is going to directly communicate with iptables This is important because in this particular scenario using -p flag (ports: key in YAML) to map ports from the container to the host OS will set up ALLOW rules on all interfaces including the internet and these rules will not be displayed in ufw honestly i have no clue who the fuck thought this is a good idea but I am so glad that Docker is still utterly broken with non-1990s networking tech so nftables just doesn't work with it, saving you some trouble 👍