mirror of
https://github.com/moby/moby.git
synced 2026-07-24 16:26:51 +00:00
5719e8edf9
New iptables rules were added by: - commit27adcd5(libnet/d/bridge: port mappings: drop direct-access when gw_mode=nat) - commitd216084(libnet/d/bridge: drop remote connections to port mapped on lo) But they're added even when iptables=false or ip6tables=false in daemon config. So, group those rules with the other per-port rules, behind a config check. Signed-off-by: Rob Murray <rob.murray@docker.com>