root@eernstworkstation:/var/run/docker/netns# iptables-save
*nat :PREROUTING ACCEPT [1:60] :INPUT ACCEPT [1:60] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] :DOCKER_OUTPUT - [0:0] :DOCKER_POSTROUTING - [0:0] -A OUTPUT -d 127.0.0.11/32 -j DOCKER_OUTPUT -A POSTROUTING -d 127.0.0.11/32 -j DOCKER_POSTROUTING -A DOCKER_OUTPUT -d 127.0.0.11/32 -p tcp -m tcp --dport 53 -j DNAT --to-destination 127.0.0.11:46459 -A DOCKER_OUTPUT -d 127.0.0.11/32 -p udp -m udp --dport 53 -j DNAT --to-destination 127.0.0.11:49365 -A DOCKER_POSTROUTING -s 127.0.0.11/32 -p tcp -m tcp --sport 46459 -j SNAT --to-source :53 -A DOCKER_POSTROUTING -s 127.0.0.11/32 -p udp -m udp --sport 49365 -j SNAT --to-source :53 COMMIT
*filter :INPUT ACCEPT [8:523] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [5:280] COMMIT
root@eernstworkstation:/var/run/docker/netns#