Skip to content

Instantly share code, notes, and snippets.

@shvyrev

shvyrev/gist:3fe2a0bc3b9593586435fea68a803f8b

Created November 8, 2024 08:54
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save shvyrev/3fe2a0bc3b9593586435fea68a803f8b to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save shvyrev/3fe2a0bc3b9593586435fea68a803f8b to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. shvyrev created this gist Nov 8, 2024.
    44 changes: 44 additions & 0 deletions gistfile1.txt
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,44 @@
    bash
    $ sudo iptables -L -n
    Chain INPUT (policy ACCEPT)
    target prot opt source destination
    ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
    ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:1414
    ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:9443

    Chain FORWARD (policy DROP)
    target prot opt source destination
    DOCKER-USER all -- 0.0.0.0/0 0.0.0.0/0
    DOCKER-ISOLATION-STAGE-1 all -- 0.0.0.0/0 0.0.0.0/0
    ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
    DOCKER all -- 0.0.0.0/0 0.0.0.0/0
    ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
    ACCEPT all -- 0.0.0.0/0 0.0.0.0/0

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination

    Chain DOCKER (1 references)
    target prot opt source destination
    ACCEPT tcp -- 0.0.0.0/0 172.17.0.2 tcp dpt:9443
    ACCEPT tcp -- 0.0.0.0/0 172.17.0.2 tcp dpt:1414

    Chain DOCKER-ISOLATION-STAGE-1 (1 references)
    target prot opt source destination
    DOCKER-ISOLATION-STAGE-2 all -- 0.0.0.0/0 0.0.0.0/0
    RETURN all -- 0.0.0.0/0 0.0.0.0/0

    Chain DOCKER-ISOLATION-STAGE-2 (1 references)
    target prot opt source destination
    DROP all -- 0.0.0.0/0 0.0.0.0/0
    RETURN all -- 0.0.0.0/0 0.0.0.0/0

    Chain DOCKER-USER (1 references)
    target prot opt source destination
    RETURN all -- 0.0.0.0/0 0.0.0.0/0


    IBM MQ :

    ACCEPT tcp -- 0.0.0.0/0 172.17.0.2 tcp dpt:9443
    ACCEPT tcp -- 0.0.0.0/0 172.17.0.2 tcp dpt:1414