The docs, always the first place to look: https://docs.docker.com/network/iptables/