This is an old revision of the document!
`/etc/default/ufw/rules.after`
this will only allow access via certain IPs to docker contaiers
``` :DOCKER-USER - [0:0] -A DOCKER-USER -s 24.87.101.13 -j RETURN -A DOCKER-USER -s 96.48.240.53 -j RETURN -A DOCKER-USER -s 192.157.115.213 -j RETURN -A DOCKER-USER -s 192.168.1.0/24 -j RETURN -A DOCKER-USER -m conntrack –ctstate RELATED,ESTABLISHED -j RETURN -A DOCKER-USER -i enp4s0 -m conntrack –ctstate NEW -j DROP -A DOCKER-USER -j RETURN ```
current `ufw status numbered`
``` [ 1] 22,3579,7878,8181,8989,9000,9001,9091,9696,32400/tcp ALLOW IN 192.168.1.0/24 [ 2] 192.168.1.0/24 22,3579,7878,8181,8989,9000,9001,9091,9696,32400/tcp ALLOW OUT Anywhere (out) [ 3] Anywhere ALLOW IN 172.16.0.0/12 [ 4] 80/tcp ALLOW IN Anywhere [ 5] 443/tcp ALLOW IN Anywhere [ 6] 80/tcp (v6) ALLOW IN Anywhere (v6) [ 7] 443/tcp (v6) ALLOW IN Anywhere (v6) ```
