Skip to content

Instantly share code, notes, and snippets.

@jordanorelli
Created July 12, 2016 00:40
Show Gist options
  • Save jordanorelli/ba927c8e957d866d7185642b54decc9e to your computer and use it in GitHub Desktop.
Save jordanorelli/ba927c8e957d866d7185642b54decc9e to your computer and use it in GitHub Desktop.
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
REJECT all -- loopback/8 anywhere reject-with icmp-port-unreachable
ACCEPT icmp -- anywhere anywhere state NEW icmp echo-request
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:http state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:https state NEW
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
LOG all -- anywhere anywhere limit: avg 5/min burst 5 LOG level debug prefix "iptables_INPUT_denied: "
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain FORWARD (policy ACCEPT)
target prot opt source destination
DOCKER-ISOLATION all -- anywhere anywhere
DOCKER all -- anywhere anywhere
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
LOG all -- anywhere anywhere limit: avg 5/min burst 5 LOG level debug prefix "iptables_FORWARD_denied: "
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain DOCKER (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere 172.17.0.2 tcp dpt:9200
ACCEPT tcp -- anywhere 172.17.0.3 tcp dpt:8098
ACCEPT tcp -- anywhere 172.17.0.3 tcp dpt:8087
ACCEPT tcp -- anywhere 172.17.0.7 tcp dpt:11211
ACCEPT tcp -- anywhere 172.17.0.4 tcp dpt:4171
ACCEPT tcp -- anywhere 172.17.0.4 tcp dpt:4161
ACCEPT tcp -- anywhere 172.17.0.4 tcp dpt:4160
ACCEPT tcp -- anywhere 172.17.0.4 tcp dpt:4151
ACCEPT tcp -- anywhere 172.17.0.4 tcp dpt:4150
ACCEPT tcp -- anywhere 172.17.0.6 tcp dpt:6400
ACCEPT tcp -- anywhere 172.17.0.6 tcp dpt:6300
ACCEPT tcp -- anywhere 172.17.0.6 tcp dpt:6100
ACCEPT tcp -- anywhere 172.17.0.6 tcp dpt:5900
ACCEPT tcp -- anywhere 172.17.0.6 tcp dpt:5700
ACCEPT tcp -- anywhere 172.17.0.6 tcp dpt:5600
ACCEPT tcp -- anywhere 172.17.0.6 tcp dpt:5500
ACCEPT tcp -- anywhere 172.17.0.6 tcp dpt:5400
ACCEPT tcp -- anywhere 172.17.0.6 tcp dpt:5200
ACCEPT tcp -- anywhere 172.17.0.6 tcp dpt:5100
ACCEPT tcp -- anywhere 172.17.0.6 tcp dpt:4800
ACCEPT tcp -- anywhere 172.17.0.6 tcp dpt:4700
ACCEPT tcp -- anywhere 172.17.0.6 tcp dpt:4400
ACCEPT tcp -- anywhere 172.17.0.5 tcp dpt:8500
Chain DOCKER-ISOLATION (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment