mirror of
https://github.com/moby/moby.git
synced 2026-08-13 17:06:44 +00:00
29e20fc904
Rules no longer need to be rearranged when creating a network. Per-network rules are always appended to the FORWARD chain so, after adding them, there's no need to delete the per-driver rules to re-insert them at the top of the chain. Signed-off-by: Rob Murray <rob.murray@docker.com>
6 lines
258 B
Plaintext
6 lines
258 B
Plaintext
-P FORWARD ACCEPT
|
|
-A FORWARD -j DOCKER-USER
|
|
-A FORWARD -m set --match-set docker-ext-bridges-v6 dst -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
-A FORWARD -j DOCKER-ISOLATION-STAGE-1
|
|
-A FORWARD -m set --match-set docker-ext-bridges-v6 dst -j DOCKER
|