/etc/default/ufw: ... DEFAULT_FORWARD_POLICY="ACCEPT" service ufw restart ufw allow in on docker0 ufw allow out on docker0