mirror of
https://github.com/moby/moby.git
synced 2026-08-03 22:51:03 +00:00
0ef2b24c80
It no longer needs to be moved to the top of the filter-FORWARD chain after creating a new bridge network. But, it does need to be rearranged after setting up Swarm ingress. Similarly, the jump to DOCKER-INGRESS no longer needs to be shuffled back to the top of the FORWARD chain after adding a new network. Signed-off-by: Rob Murray <rob.murray@docker.com>
6 lines
258 B
Plaintext
6 lines
258 B
Plaintext
-P FORWARD ACCEPT
|
|
-A FORWARD -j DOCKER-USER
|
|
-A FORWARD -m set --match-set docker-ext-bridges-v4 dst -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
-A FORWARD -j DOCKER-ISOLATION-STAGE-1
|
|
-A FORWARD -m set --match-set docker-ext-bridges-v4 dst -j DOCKER
|