schiwagoa/ufw-docker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

forgot to add ufw-user-forward table

Browse Source
This commit is contained in:
Chai Feng 2018-08-08 23:03:01 +08:00
parent 85cd2c1893
commit b6f325f9d1
No known key found for this signature in database
GPG Key ID: 2DCD9A24E523FFD2
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@ -66,6 +66,7 @@ Modify the UFW configuration file `/etc/ufw/after.rules` and add the following r
# BEGIN UFW AND DOCKER # BEGIN UFW AND DOCKER
*filter *filter
:ufw-user-forward - [0:0]
:DOCKER-USER - [0:0] :DOCKER-USER - [0:0]
-A DOCKER-USER -j RETURN -s 10.0.0.0/8 -A DOCKER-USER -j RETURN -s 10.0.0.0/8
-A DOCKER-USER -j RETURN -s 172.16.0.0/12 -A DOCKER-USER -j RETURN -s 172.16.0.0/12
@ -189,6 +190,7 @@ UFW 是 Ubuntu 上很流行的一个 iptables 前端，可以非常方便的管
# BEGIN UFW AND DOCKER # BEGIN UFW AND DOCKER
*filter *filter
:ufw-user-forward - [0:0]
:DOCKER-USER - [0:0] :DOCKER-USER - [0:0]
-A DOCKER-USER -j RETURN -s 10.0.0.0/8 -A DOCKER-USER -j RETURN -s 10.0.0.0/8
-A DOCKER-USER -j RETURN -s 172.16.0.0/12 -A DOCKER-USER -j RETURN -s 172.16.0.0/12

7
ufw-docker
View File

@ -98,12 +98,13 @@ function ufw-docker--instance-name() {
function ufw-docker--install() { function ufw-docker--install() {
if ! grep "^# BEGIN UFW AND DOCKER\$" /etc/ufw/after.rules &>/dev/null; then if ! grep "^# BEGIN UFW AND DOCKER\$" /etc/ufw/after.rules &>/dev/null; then
err "Back up /etc/ufw/after.rules" err "Back up /etc/ufw/after.rules"
cp /etc/ufw/after.rules /etc/ufw/after.rules-ufw-docker~"$(date '+%Y-%m-%d-%H%M%S').bak" cp /etc/ufw/after.rules /etc/ufw/after.rules-ufw-docker~"$(date '+%Y-%m-%d-%H%M%S').bak"
cat <<-\EOF | tee -a /etc/ufw/after.rules cat <<-\EOF | tee -a /etc/ufw/after.rules
# BEGIN UFW AND DOCKER # BEGIN UFW AND DOCKER
*filter *filter
:DOCKER-USER - [0:0] :DOCKER-USER - [0:0]
:ufw-user-forward - [0:0]
-A DOCKER-USER -j RETURN -s 10.0.0.0/8 -A DOCKER-USER -j RETURN -s 10.0.0.0/8
-A DOCKER-USER -j RETURN -s 172.16.0.0/12 -A DOCKER-USER -j RETURN -s 172.16.0.0/12
-A DOCKER-USER -j RETURN -s 192.168.0.0/16 -A DOCKER-USER -j RETURN -s 192.168.0.0/16
@ -121,8 +122,8 @@ function ufw-docker--install() {
COMMIT COMMIT
# END UFW AND DOCKER # END UFW AND DOCKER
EOF EOF
err "Please restart UFW service manually." err "Please restart UFW service manually."
fi fi
} }
function ufw-docker--help() { function ufw-docker--help() {