mirror of
https://github.com/moby/moby.git
synced 2026-07-19 05:50:57 +00:00
984a610a21
In 28.0.0, Docker appended to the FORWARD chain - breaking other applications that had appended their own rules that needed to execute after Docker's rules. Move most of Docker's rules out of the filter-FORWARD chain into a new DOCKER-FORWARD chain, so that Docker can append to DOCKER-FORWARD without affecting the order of rules in the FORWARD chain. After daemon startup inserts jumps to DOCKER-USER and DOCKER-FORWARD, the bridge driver will not touch the FORWARD chain again. DOCKER-INGRESS is still added to the FORWARD chain, if used, as it was in 27.x and earlier. Signed-off-by: Rob Murray <rob.murray@docker.com>
4 lines
73 B
Plaintext
4 lines
73 B
Plaintext
-P FORWARD ACCEPT
|
|
-A FORWARD -j DOCKER-USER
|
|
-A FORWARD -j DOCKER-FORWARD
|