Every single of Individuals a few alternatives have disadvantages, so you need to diligently take into account, if you really need To achieve this distinct forwarding.
What I would like to find out, even though, is whether we could block all ports instead of just a few. Wouldn't it get the job done as predicted without the --ctorigdstport? Then I can open up some ports (inserting several guidelines before this a person) if important then have every little thing else blocked.
At some point, you'll have 파라곤 to clear up iptables restart the docker provider 1st, when you messed it an excessive amount seeking to lock down the port as I did.