Add 'docker-forwarding' policy to firewalld description.

Signed-off-by: Rob Murray <rob.murray@docker.com>
This commit is contained in:
Rob Murray 2024-05-07 13:49:05 +01:00
parent 1c00298925
commit 506bd33f20
1 changed files with 7 additions and 3 deletions

View File

@ -157,9 +157,13 @@ $ docker network create mybridge \
If you are running Docker with the `iptables` option set to `true`, and
[firewalld](https://firewalld.org) is enabled on your system, Docker
automatically creates a `firewalld` zone called `docker` and inserts all the
network interfaces it creates (for example, `docker0`) into the `docker` zone
to allow seamless networking.
automatically creates a `firewalld` zone called `docker`, with target `ACCEPT`.
All network interfaces created by Docker (for example, `docker0`) are inserted
into the `docker` zone.
Docker also creates a forwarding policy called `docker-forwarding` that allows
forwarding from `ANY` zone to the `docker` zone.
## Docker and ufw