We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 68b6a6e commit 7f5bdfaCopy full SHA for 7f5bdfa
1 file changed
lib/iptables.sh
@@ -12,10 +12,10 @@ iptables::run_rules() {
12
13
# drop all new traffic from container ip to runnable infra
14
iptables -I FORWARD -s ${DOCKER_NETWORK} -d 10.0.0.0/8 -m state --state NEW -j DROP
15
- # log container traffic for PSAD
16
- iptables -I FORWARD -s ${DOCKER_NETWORK} -j LOG
+
17
# drop all local container to container traffic
18
iptables -I FORWARD -s ${DOCKER_NETWORK} -d ${DOCKER_NETWORK} -j DROP
19
# allow consul access (should be before drop)
20
iptables -I FORWARD -s ${DOCKER_NETWORK} -d ${CONSUL_HOSTNAME} -j ACCEPT
21
0 commit comments