This repository has been archived by the owner on Nov 9, 2024. It is now read-only.
ufw rules are not applied before docker iptables
Package
No package listed
Affected versions
< 0.1
Patched versions
0.1
Description
Credits
-
flavio-fernandes Reporter
Summary
Uncomplicated Firewall (UFW) is not blocking anything when using Docker
Details
When Docker is installed, Docker bypass the UFW rules and the published ports can be accessed from outside.
PoC
See: https://github.com/chaifeng/ufw-docker
Impact
The ufw rules for access to 80, 443 (tcp) and 51820 (udp) are meaningless. We should either remove them or make the changes
to have docker exposed ports respect ufw rules.
NOTE More info on this issue can be tracked here: moby/moby#45532