Rob Murray df3c78d061 Combine outgoing and ICC iptables rules ...

Rather than:

  ACCEPT -i <bridge> -o <bridge>   // icc=true
  ACCEPT -i <bridge> ! -o <bridge> // outgoing

Do:

  ACCEPT -i <bridge>  // icc=true and outgoing

For ICC=false, continue to do:

  DROP -i <bridge> -o <bridge>
  ACCEPT -i <bridge> ! -o <bridge>

Signed-off-by: Rob Murray <rob.murray@docker.com>

2024-12-17 10:38:09 +00:00

..

build

integration/build: make TestBuildEmitsImageCreateEvent less noisy

2024-12-16 13:43:05 +01:00

capabilities

integration: remove default poll delay and timeouts

2024-11-26 14:05:02 +01:00

config

integration/config: remove redundant capturing of loop vars (copyloopvar)

2024-11-12 14:02:10 +01:00

container

Merge pull request #48956 from thaJeztah/poll_default_delay

2024-11-27 22:20:36 +01:00

daemon

Ignore kernel-assigned LL addrs when selecting "bip6"

2024-12-04 18:19:41 +00:00

distribution

bump gotest.tools v3.0.1 for compatibility with Go 1.14

2020-02-11 00:06:42 +01:00

image

integration: add wait

2024-11-27 15:52:49 +01:00

internal

Delete /etc/hosts entries on network disconnect

2024-11-15 10:58:30 +00:00

network

Combine outgoing and ICC iptables rules

2024-12-17 10:38:09 +00:00

networking

Rename L3Segment Host.Run -> Host.MustRun

2024-12-17 09:14:25 +00:00

plugin

integration: add wait

2024-11-27 15:52:49 +01:00

secret

api/types: move ExecConfig to api/types/container

2024-06-10 10:19:46 +02:00

service

tests: migrate away from assert.Assert(v == nil)

2024-11-22 23:59:20 +11:00

session

integration(-cli): remove skips for old daemon versions (<20.10)

2023-12-05 01:03:50 +01:00

system

Accurately reflect the canonical casing of API-Version and OS-Type headers

2024-12-08 22:23:57 +00:00

testdata/https

Update test certificates

2021-05-18 09:43:21 +02:00

volume

integration/volume: remove redundant capturing of loop vars (copyloopvar)

2024-11-12 14:02:17 +01:00

doc.go

Add canonical import comment

2018-02-05 16:51:57 -05:00