-
-
Notifications
You must be signed in to change notification settings - Fork 10
Description
Is this a new feature request?
- I have searched the existing issues
Wanted change
Hi there,
i've just spent a few hours trying to figure out why i just wasn't able to get iptables working on the docker host, and why my iptables was just getting modified inside the container.
Long story short: the versions of iptables on the host and the container have to match. I didn't use iptables-nft on the host before, and so i had issues.
I was about to think that these fail2ban-containers are just is supposed to modify iptables inside the container, and that i was just thinking that it would be able to modify the host.
Please add to your install instructions that you have to check that the iptables version (and interface "legacy" or "nft") matches. Otherwise, your container will only modify the rules inside the container, even if everything else is set up correctly.
Thanks in advance.
Best regards.
Reason for change
Saving people a lot of time researching and possibly giving up. Noone expects that those 2 "interfaces" of iptables are not compatible, and i also doubt that many know which of both they're actually using.
Proposed code change
No response
Metadata
Metadata
Assignees
Labels
Type
Projects
Status