Hi, I am having a issue with Docker when I run FirewallD on my Centos 7 servers, what I have noticed is that when it runs I loss connectivity to the internet as well as my POSTFIX service I have on the host OS(I use this to send emails) So with my setup I have Nginx running on the host as I am planning on running other sites off the server, that works fine based off the doco I have read. I am more of an iptables guy as I have used it for years, I have read over what FirewallD can do it is something I want to use on my server. If anyone can help me with this that would be great :smile: Thanks, Rei

FirewallD is awesome :slight_smile: Run firewall-cmd --get-services to get a list of services, then simply add the ones you want, such as: firewall-cmd --permanent --add-service=http firewall-cmd --permanent --add-service=https firewall-cmd --permanent --add-service=pop3s firewall-cmd --permanent --add-service=smtp List your services with firewall-cmd --permanent --list-services Then restart with systemctl restart firewalld and check everything is working on your server, then systemctl enable firewalld to enable and start the firewall on reboot. Then restart docker with systemctl restart docker and if you ever restart the firewall, you need to restart docker. It’s so easy I love it! :slight_smile:

I have made the changes and it has helped a bit, what I am getting now is a no route to host from Docker when I try to get it to talk to my SMTP server on my host. I have added this in but it did not help firewall-cmd --permanent --zone=trusted --add-interface=docker0 Any ideas?

Hi, Ok I got it going, I needed to add this in as well firewall-cmd --permanent --zone=trusted --add-port=25/tcp Now when you do this you will start getting other issues with docker not being able to resolve DNS etc, so you will need to add those rules in as well. Regards, Rei

Why didn’t just opening the SMTP port work? (You need to restart Docker after starting FirewallD) I did not need to do any of those steps in your posts.

I think it is the fact that I had the SMTP server on the host OS and not some where else, I did some reading about the no route to host issues I was getting from Docker and Firewalld. What I put as the steps I did to get it working was what I read. Granted as I said the knock on affect of doing what I did was the fact that I need to add all of the required ports in the trusted zone. It seemed to be the only way I could get what I wanted working. Cheers, Rei

Centos 7 - Docker and FirewallD

Product Support Self-hosting

nawarei 13 באוגוסט,‏ 2015,‏ 1:02am 3

Thanks, I will try this when I get home and let you know how I get on.

נושא		תגובות	צפיות
LAN SMTP relay configuration issue Self-hosting	1	672	18 בספטמבר,‏ 2018
Docker shim error on CentOS 7 Product Support	25	9959	11 בינואר,‏ 2018
Shorewall+Docker: Two Great Tastes That Taste Great Together Blog	3	5002	19 בדצמבר,‏ 2020
SMTP config to use localhost or 172.17.0.1 is not working, how to debug Product Support	1	1839	9 ביוני,‏ 2022
Discourse suddenly not accessible anymore Self-hosting	6	918	5 ביוני,‏ 2024

Centos 7 - Docker and FirewallD

נושאים קשורים