mirror of
https://github.com/moby/moby.git
synced 2026-08-09 09:33:50 +00:00
Fix expected results for nftablesdoc tests
Signed-off-by: Rob Murray <rob.murray@docker.com>
This commit is contained in:
@@ -124,7 +124,7 @@ The rules are:
|
||||
with the same hook._
|
||||
- accept packets originating within the network, because inter-container
|
||||
communication (ICC) is enabled.
|
||||
- drop any other packets, because no there are no containers in the network
|
||||
- drop any other packets, because there are no containers in the network
|
||||
with published ports. _This means there is no dependency on the filter-FORWARD
|
||||
chain's default policy. Even if it is ACCEPT, packets will be dropped unless
|
||||
container ports/protocols are published._
|
||||
|
||||
@@ -9,7 +9,7 @@ Adding a network running a container with a mapped port, equivalent to:
|
||||
|
||||
The `ip docker-bridges` table is updated as follows:
|
||||
|
||||
table ip docker-bridges {
|
||||
table ip docker-bridges {
|
||||
map filter-forward-in-jumps {
|
||||
type ifname : verdict
|
||||
elements = { "docker0" : jump filter-forward-in__docker0,
|
||||
|
||||
Reference in New Issue
Block a user