Skip to content

Commit 913e75e

Browse files
committed
network: disambiguate which program the iptables option applies to
Closes #19148 Signed-off-by: David Karlsson <[email protected]>
1 parent 8ce218f commit 913e75e

File tree

1 file changed

+6
-5
lines changed

1 file changed

+6
-5
lines changed

content/network/packet-filtering-firewalls.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -155,10 +155,11 @@ $ docker network create mybridge \
155155

156156
## Integration with firewalld
157157

158-
If you are running Docker with [firewalld](https://firewalld.org)
159-
on your system with `--iptables` enabled, Docker automatically creates a `firewalld`
160-
zone called `docker` and inserts all the network interfaces it creates (for example,
161-
`docker0`) into the `docker` zone to allow seamless networking.
158+
If you are running Docker with the `iptables` option set to `true`, and
159+
[firewalld](https://firewalld.org) is enabled on your system, Docker
160+
automatically creates a `firewalld` zone called `docker` and inserts all the
161+
network interfaces it creates (for example, `docker0`) into the `docker` zone
162+
to allow seamless networking.
162163

163164
## Docker and ufw
164165

@@ -172,4 +173,4 @@ container gets diverted before it goes through the ufw firewall settings.
172173
Docker routes container traffic in the `nat` table, which means that packets
173174
are diverted before it reaches the `INPUT` and `OUTPUT` chains that ufw uses.
174175
Packets are routed before the firewall rules can be applied,
175-
effectively ignoring your firewall configuration.
176+
effectively ignoring your firewall configuration.

0 commit comments

Comments
 (0)