Skip to content

Instantly share code, notes, and snippets.

@Keno
Created July 30, 2020 04:56
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Keno/274d6c4684c391e2851cd598e165495c to your computer and use it in GitHub Desktop.
Save Keno/274d6c4684c391e2851cd598e165495c to your computer and use it in GitHub Desktop.
keno@praclarush:~/docker-jitsi-meet$ sudo iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy DROP)
target prot opt source destination
DOCKER-USER all -- anywhere anywhere
DOCKER-ISOLATION-STAGE-1 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
DOCKER all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
DOCKER all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain DOCKER (2 references)
target prot opt source destination
ACCEPT tcp -- anywhere 172.21.0.2 tcp dpt:https
ACCEPT tcp -- anywhere 172.21.0.2 tcp dpt:http
ACCEPT udp -- anywhere 172.21.0.5 udp dpt:10000
ACCEPT tcp -- anywhere 172.21.0.5 tcp dpt:4443
Chain DOCKER-ISOLATION-STAGE-1 (1 references)
target prot opt source destination
DOCKER-ISOLATION-STAGE-2 all -- anywhere anywhere
DOCKER-ISOLATION-STAGE-2 all -- anywhere anywhere
RETURN all -- anywhere anywhere
Chain DOCKER-ISOLATION-STAGE-2 (2 references)
target prot opt source destination
DROP all -- anywhere anywhere
DROP all -- anywhere anywhere
RETURN all -- anywhere anywhere
Chain DOCKER-USER (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
keno@praclarush:~/docker-jitsi-meet$ sudo iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DOCKER all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
DOCKER all -- anywhere !localhost/8 ADDRTYPE match dst-type LOCAL
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 172.21.0.0/16 anywhere
MASQUERADE all -- 172.17.0.0/16 anywhere
MASQUERADE tcp -- 172.21.0.2 172.21.0.2 tcp dpt:https
MASQUERADE tcp -- 172.21.0.2 172.21.0.2 tcp dpt:http
MASQUERADE udp -- 172.21.0.5 172.21.0.5 udp dpt:10000
MASQUERADE tcp -- 172.21.0.5 172.21.0.5 tcp dpt:4443
Chain DOCKER (2 references)
target prot opt source destination
RETURN all -- anywhere anywhere
RETURN all -- anywhere anywhere
DNAT tcp -- anywhere anywhere tcp dpt:8443 to:172.21.0.2:443
DNAT tcp -- anywhere anywhere tcp dpt:8000 to:172.21.0.2:80
DNAT udp -- anywhere anywhere udp dpt:10000 to:172.21.0.5:10000
DNAT tcp -- anywhere anywhere tcp dpt:4443 to:172.21.0.5:4443
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment