moby--moby/libnetwork/iptables
Jacob Wen c348cebe99 Add a filter chain to allow persistent rules
Allow users to configure firewall policies in a way that persists
docker operations/restarts. Docker will not delete or modify any
pre-existing rules from the DOCKER-USER filter chain. This allows
the user to create in advance any rules required to further
restrict access from/to the containers.

Fixes docker/docker#29184
Fixes docker/docker#23987
Related to docker/docker#24848

Signed-off-by: Jacob Wen <jian.w.wen@oracle.com>
2017-05-16 10:24:56 +08:00
..
conntrack.go Flush container flows in conntrack (Bug #8795) 2017-04-07 18:30:45 -07:00
firewalld.go Remove firewalld running log 2017-04-06 21:09:49 -07:00
firewalld_test.go Remove unnecessary string formats 2016-11-22 09:29:53 +08:00
iptables.go Add a filter chain to allow persistent rules 2017-05-16 10:24:56 +08:00
iptables_test.go Remove unnecessary string formats 2016-11-22 09:29:53 +08:00