Update to docker-ce 28.2.2 breaks bridge networking to container

[rimelek (Ákos Takács)]

Thank you for sharing your solution. Here is the syntax for compose in another topic:

Is it possible to disable nat in docker-compose?

in more recent versions of docker, use this: networks: network-name: driver: bridge driver_opts: com.docker.network.bridge.gateway_mode_ipv4: 'routed'

Just in case it is related, I also found this in a moby discussion:

Direct routed access to container ports that are not exposed using p /-publish is now blocked in the DOCKER iptables chain. moby/moby#48724 * If the default iptables filter-FORWARD policy was previously left at ACCEPT on your host, and direct routed access to a container’s unpublished ports from a remote host is still required, options are:

• Publish the ports you need.
• Use the new gateway_mode_ipv[46]=nat-unprotected, described below.