Add new iptables rules to Docker

[rimelek (Ákos Takács)]

It is explained here:

https://docs.docker.com/network/packet-filtering-firewalls/#add-iptables-policies-before-dockers-rules

And I summarized the options for a similar issue here:

Is there anyway to get Docker and libvirt to play along for network bridges?

This is the related documentation You can add additional rules to the DOCKER-USER chain. This is what I did, but then you need to make sure the rules are added every time you reboot your machine. The “Docker on a router” section in the documentation shows what you could add to the DOCKER-USER chain. You could disable manipulating iptables, but as the documentation says, you can’t completely disable it and it will break your container networking. It is not mentioned in the documentation as it…

The DOCKER-USER chain can be changed. But as far as I know, iptables-restore restores all rules removing the existing rules so you will need to use the iptables commands in a script to insert new rules.