Docker Engine v28: Hardening Container Networking by Default (docker.com) 3 points by password4321 1y ago ↗ HN
[–] password4321 1y ago ↗ Docker networking defaults have been tightened up but per https://github.com/moby/moby/issues/22054#issuecomment-28714...:the default binding address is still 0.0.0.0.There are now rules in raw-PREROUTING to drop packets sent from outside the host to container addresses, and to ports mapped to the loopback address. Rules in the filter-FORWARD chain no longer depend on its default policy.
1 comment
[ 3.0 ms ] story [ 14.5 ms ] threadthe default binding address is still 0.0.0.0.
There are now rules in raw-PREROUTING to drop packets sent from outside the host to container addresses, and to ports mapped to the loopback address. Rules in the filter-FORWARD chain no longer depend on its default policy.