Hello. I’ve been trying to figure this out on my own but so far have not been successful. I’d like block all IPs to a specific container, and allow only select IPs, plus my LAN, 192.168.1.0, etc.
My understanding is I would add these rules to the DOCKER-USER chain. If the container has IP address of 172.20.0.20, can anyone give me an example of:
- allow rule for subnet 192.168.1.0
- deny rule for everything else
?
Also, I read in several places that custom rules added to DOCKER-CHAIN are not retained after reboot. if so, how are people handling that?
System is Ubuntu 22.04
Any assistance it greatly appreciated. Thanks.