mauricevOriginal post
Rank 2: Process
Here is my firewall configuration:
table ip filter {
set blacklist {
type ipv4_addr
flags interval
elements = { 46.229.168.0/24 }
}
chain input {
type filter hook input priority filter; policy drop;
ip saddr @blacklist drop
ct state invalid drop
iif "lo" accept
icmp type echo-request limit rate over 10/second burst 4 packets drop
ct state established,related accept
icmp type { destination-unreachable, echo-request, router-advertisement, router-solicitation, time-exceeded, parameter-problem } accept
ip protocol igmp accept
ip saddr { 8.8.8.0/24, 47.19.177.245-47.19.177.246 } tcp dport 22 ct state new accept
ip saddr { 47.19.177.245, 47.19.177.246 } tcp dport 497 ct state new accept
tcp dport 443 accept
}
chain FORWARD {
type filter hook forward priority filter; policy drop;
}
chain OUTPUT {
type filter hook output priority filter; policy accept;
}
}
Summary
The user was experiencing an issue with their firewall causing several of their Docker containers to keep restarting. They discovered that Docker sets up its own rules using IPtables, which don't mix well with nftables. They converted their rules to iptables, which resolved the problem. There is no further solution or troubleshooting mentioned in the thread.