dilim/moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2026-08-09 09:33:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Flush iptables chains DOCKER-CT, DOCKER-BRIDGE on startup

Browse Source 
These chains were added in commit 76417bf ("Don't use ipset"), but
not included in the list of chains that get flushed and deleted
on daemon startup.

Signed-off-by: Rob Murray <rob.murray@docker.com>
This commit is contained in:
Rob Murray
2025-03-05 11:47:36 +00:00
parent 65c2f799b4
commit 26edf2d0a7
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
libnetwork/drivers/bridge/setup_ip_tables_linux.go
View File

@@ -677,6 +677,8 @@ func removeIPChains(version iptables.IPVersion) {
{Name: DockerChain, Table: iptables.Nat, IPVersion: version},
{Name: DockerChain, Table: iptables.Filter, IPVersion: version},
{Name: DockerForwardChain, Table: iptables.Filter, IPVersion: version},
{Name: DockerBridgeChain, Table: iptables.Filter, IPVersion: version},
{Name: DockerCTChain, Table: iptables.Filter, IPVersion: version},
{Name: IsolationChain1, Table: iptables.Filter, IPVersion: version},
{Name: IsolationChain2, Table: iptables.Filter, IPVersion: version},
{Name: oldIsolationChain, Table: iptables.Filter, IPVersion: version},