IP 범위 차단하는 법? '차단된 IP'가 차단되지 않음

[sb56637]

그리고 더 복잡하게 만드는 것은, 호스트 서버의 ufw / nftables가 Docker 내부에서 예상대로 차단하지 않는 것 같습니다:

UFW가 Discourse도 제한할까요?

This is actually a really good question and one I’m surprised nobody else has yet asked. The answer is complicated, but so far the responses on this topic have unfortunately been dismissive in tone without answering the question. It isn’t per se that Discourse is bypassing ufw, but docker bypasses ufw by adding rules that cause any exposed ports of docker containers to work despite the presence of ufw. What’s going on? Incoming packets destined for a container hit the FORWARD table, not the IN…