ltsOver9000

You've loaded an old revision of the document! If you save it, you will create a new version with this data.

`/etc/default/ufw/rules.after`

this will only allow access via certain IPs to docker contaiers

```
:DOCKER-USER - [0:0]
-A DOCKER-USER -s 24.87.101.13 -j RETURN
-A DOCKER-USER -s 96.48.240.53 -j RETURN
-A DOCKER-USER -s 192.157.115.213 -j RETURN
-A DOCKER-USER -s 192.168.1.0/24 -j RETURN
-A DOCKER-USER -m conntrack --ctstate RELATED,ESTABLISHED -j RETURN
-A DOCKER-USER -i enp4s0 -m conntrack --ctstate NEW -j DROP
-A DOCKER-USER -j RETURN
```

current `ufw status numbered`

```
[ 1] 22,3579,7878,8181,8989,9000,9001,9091,9696,32400/tcp ALLOW IN    192.168.1.0/24            
[ 2] 192.168.1.0/24 22,3579,7878,8181,8989,9000,9001,9091,9696,32400/tcp ALLOW OUT   Anywhere                   (out)
[ 3] Anywhere                   ALLOW IN    172.16.0.0/12             
[ 4] 80/tcp                     ALLOW IN    Anywhere                  
[ 5] 443/tcp                    ALLOW IN    Anywhere                  
[ 6] 80/tcp (v6)                ALLOW IN    Anywhere (v6)             
[ 7] 443/tcp (v6)               ALLOW IN    Anywhere (v6)    
```

Edit summary

Note: By editing this page you agree to license your content under the following license: CC Attribution-Share Alike 4.0 International

ltsOver9000

User Tools

Site Tools

Page Tools