25 lines
748 B
Bash
Executable File
25 lines
748 B
Bash
Executable File
#!/bin/sh
|
|
|
|
echo "[DOCKER] Setting up FW rules."
|
|
|
|
iptables -N DOCKER
|
|
|
|
# Masquerade outbound connections from containers
|
|
iptables -t nat -A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
|
|
|
|
# Accept established connections to the docker containers
|
|
iptables -t filter -A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
|
|
# Allow docker containers to communicate with themselves & outside world
|
|
iptables -t filter -A FORWARD -i docker0 ! -o docker0 -j ACCEPT
|
|
iptables -t filter -A FORWARD -i docker0 -o docker0 -j ACCEPT
|
|
|
|
echo "[DOCKER] Done."
|
|
|
|
# restart docker
|
|
systemctl restart docker >/dev/null 2>&1
|
|
|
|
# restart fail2ban after CSF update (otherwise fail2ban rules won't work)
|
|
systemctl restart fail2ban >/dev/null 2>&1
|
|
|