Hacker News Reader

Setting up a firewall like ufw could prevent accidental port mapping to 0.0.0.0. I really don’t like that this is Docker‘s default.

View on HN

Last time I checked (~year ago) Docker used different iptables chain(s) than ufw or added itself before ufw rules, so ufw was useless in securing access to ports exposed by containers.

Ok, thanks for the heads up, I'm going to test this.

Reply on news.ycombinator.com