This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
*nat | |
:PREROUTING ACCEPT [3423:660395] | |
:INPUT ACCEPT [0:0] | |
:OUTPUT ACCEPT [43075:8811003] | |
:POSTROUTING ACCEPT [40442:8299404] | |
:DOCKER - [0:0] | |
-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER | |
-A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER | |
-A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE | |
-A POSTROUTING -s 172.17.0.3/32 -d 172.17.0.3/32 -p tcp -m tcp --dport 5432 -j MASQUERADE | |
-A POSTROUTING -s 172.17.0.2/32 -d 172.17.0.2/32 -p tcp -m tcp --dport 6379 -j MASQUERADE | |
-A DOCKER -i docker0 -j RETURN | |
-A DOCKER ! -i docker0 -p tcp -m tcp --dport 5432 -j DNAT --to-destination 172.17.0.3:5432 | |
-A DOCKER ! -i docker0 -p tcp -m tcp --dport 6379 -j DNAT --to-destination 172.17.0.2:6379 | |
COMMIT | |
# Completed on Fri Apr 27 20:06:10 2018 | |
# Generated by iptables-save v1.6.1 on Fri Apr 27 20:06:10 2018 | |
*filter | |
:INPUT DROP [0:0] | |
:FORWARD DROP [0:0] | |
:OUTPUT ACCEPT [9:806] | |
-A INPUT -i lo -j ACCEPT | |
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT | |
-A INPUT -p udp -m udp --dport 32768:61000 -m comment --comment chromecast -j ACCEPT | |
-A INPUT -p udp -m udp --dport 27031 -m comment --comment steam -j ACCEPT | |
-A INPUT -p tcp -m tcp --dport 27036 -m comment --comment steam -j ACCEPT | |
-A INPUT -p udp -m udp --dport 27036 -m comment --comment steam -j ACCEPT | |
-A INPUT -p tcp -m tcp --dport 27037 -m comment --comment steam -j ACCEPT | |
COMMIT | |
# Completed on Fri Apr 27 20:06:10 2018 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment