Skip to content

Instantly share code, notes, and snippets.

@AyumuKasuga
Last active October 3, 2018 18:52
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save AyumuKasuga/961d6c9bdd1384f7535809c65949fc69 to your computer and use it in GitHub Desktop.
Save AyumuKasuga/961d6c9bdd1384f7535809c65949fc69 to your computer and use it in GitHub Desktop.
*nat
:PREROUTING ACCEPT [3423:660395]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [43075:8811003]
:POSTROUTING ACCEPT [40442:8299404]
:DOCKER - [0:0]
-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
-A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
-A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
-A POSTROUTING -s 172.17.0.3/32 -d 172.17.0.3/32 -p tcp -m tcp --dport 5432 -j MASQUERADE
-A POSTROUTING -s 172.17.0.2/32 -d 172.17.0.2/32 -p tcp -m tcp --dport 6379 -j MASQUERADE
-A DOCKER -i docker0 -j RETURN
-A DOCKER ! -i docker0 -p tcp -m tcp --dport 5432 -j DNAT --to-destination 172.17.0.3:5432
-A DOCKER ! -i docker0 -p tcp -m tcp --dport 6379 -j DNAT --to-destination 172.17.0.2:6379
COMMIT
# Completed on Fri Apr 27 20:06:10 2018
# Generated by iptables-save v1.6.1 on Fri Apr 27 20:06:10 2018
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [9:806]
-A INPUT -i lo -j ACCEPT
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p udp -m udp --dport 32768:61000 -m comment --comment chromecast -j ACCEPT
-A INPUT -p udp -m udp --dport 27031 -m comment --comment steam -j ACCEPT
-A INPUT -p tcp -m tcp --dport 27036 -m comment --comment steam -j ACCEPT
-A INPUT -p udp -m udp --dport 27036 -m comment --comment steam -j ACCEPT
-A INPUT -p tcp -m tcp --dport 27037 -m comment --comment steam -j ACCEPT
COMMIT
# Completed on Fri Apr 27 20:06:10 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment