Discourse 설치 보안을 위한 Nftables 규칙

[Stephen]

안녕하세요 @OrkoGrayskull, 다음 링크를 찾으셨나요?

UFW가 Discourse도 제한할까요?

This is actually a really good question and one I’m surprised nobody else has yet asked. The answer is complicated, but so far the responses on this topic have unfortunately been dismissive in tone without answering the question. It isn’t per se that Discourse is bypassing ufw, but docker bypasses ufw by adding rules that cause any exposed ports of docker containers to work despite the presence of ufw. What’s going on? Incoming packets destined for a container hit the FORWARD table, not the IN…

거기에는 Docker가 방화벽과 어떻게 상호작용하는지에 대한 배경 설명이 조금 더 자세히 나와 있습니다.