Skip to content

Instantly share code, notes, and snippets.

@bketelsen
Created September 8, 2014 23:02
Show Gist options
  • Save bketelsen/285de0f0579e9d500457 to your computer and use it in GitHub Desktop.
Save bketelsen/285de0f0579e9d500457 to your computer and use it in GitHub Desktop.
# Generated by iptables-save v1.4.21 on Mon Sep 8 20:25:41 2014
*nat
:PREROUTING ACCEPT [104:9780]
:INPUT ACCEPT [91:8868]
:OUTPUT ACCEPT [121:8044]
:POSTROUTING ACCEPT [121:8044]
:DOCKER - [0:0]
[91:5620] -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
[68:4080] -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
[0:0] -A POSTROUTING -s 10.100.97.0/24 ! -d 10.100.97.0/24 -j MASQUERADE
COMMIT
# Completed on Mon Sep 8 20:25:41 2014
# Generated by iptables-save v1.4.21 on Mon Sep 8 20:25:41 2014
*filter
:INPUT DROP [13:912]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [63710:8387853]
[74312:77394225] -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
[1:88] -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
[0:0] -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
[104:10140] -A INPUT -i lo -j ACCEPT
[0:0] -A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
[1:56] -A INPUT -p icmp -m icmp --icmp-type 3 -j ACCEPT
[0:0] -A INPUT -p icmp -m icmp --icmp-type 11 -j ACCEPT
[81:4860] -A INPUT -s 10.208.160.0/19 -i eth1 -j ACCEPT
[0:0] -A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
[0:0] -A FORWARD -i docker0 ! -o docker0 -j ACCEPT
[0:0] -A FORWARD -i docker0 -o docker0 -j ACCEPT
COMMIT
# Completed on Mon Sep 8 20:25:41 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment