# Generated by iptables-save v1.6.1 on Tue May 22 02:35:08 2018 *security :INPUT ACCEPT [90281589:43156856389] :FORWARD ACCEPT [19357332:10349063654] :OUTPUT ACCEPT [92592191:85385915174] COMMIT # Completed on Tue May 22 02:35:08 2018 # Generated by iptables-save v1.6.1 on Tue May 22 02:35:08 2018 *raw :PREROUTING ACCEPT [109637099:53505462941] :OUTPUT ACCEPT [92592377:85385932254] COMMIT # Completed on Tue May 22 02:35:08 2018 # Generated by iptables-save v1.6.1 on Tue May 22 02:35:08 2018 *nat :PREROUTING ACCEPT [420:25186] :INPUT ACCEPT [19:1126] :OUTPUT ACCEPT [43:2884] :POSTROUTING ACCEPT [415:24900] :DOCKER - [0:0] -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER -A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE -A POSTROUTING -o eth0 -j MASQUERADE -A POSTROUTING -s 172.16.0.0/24 -d 172.16.0.0/24 -j ACCEPT -A POSTROUTING -s 172.16.0.0/24 -j MASQUERADE -A POSTROUTING -s 172.17.0.2/32 -d 172.17.0.2/32 -p tcp -m tcp --dport 3000 -j MASQUERADE -A POSTROUTING -s 172.17.0.2/32 -d 172.17.0.2/32 -p tcp -m tcp --dport 22 -j MASQUERADE -A POSTROUTING -s 172.17.0.3/32 -d 172.17.0.3/32 -p tcp -m tcp --dport 8080 -j MASQUERADE -A POSTROUTING -s 172.16.0.0/24 -d 172.16.0.0/24 -j ACCEPT -A POSTROUTING -s 172.16.0.0/24 -j MASQUERADE -A POSTROUTING -s 172.16.0.0/24 -d 172.16.0.0/24 -j ACCEPT -A POSTROUTING -s 172.16.0.0/24 -j MASQUERADE -A POSTROUTING -s 172.16.0.0/24 -d 172.16.0.0/24 -j ACCEPT -A POSTROUTING -s 172.16.0.0/24 -j MASQUERADE -A POSTROUTING -s 172.16.0.0/24 -d 172.16.0.0/24 -j ACCEPT -A POSTROUTING -s 172.16.0.0/24 -j MASQUERADE -A POSTROUTING -s 172.16.0.0/24 -d 172.16.0.0/24 -j ACCEPT -A POSTROUTING -s 172.16.0.0/24 -j MASQUERADE -A DOCKER -i docker0 -j RETURN -A DOCKER ! -i docker0 -p tcp -m tcp --dport 3010 -j DNAT --to-destination 172.17.0.2:3000 -A DOCKER ! -i docker0 -p tcp -m tcp --dport 22222 -j DNAT --to-destination 172.17.0.2:22 -A DOCKER ! -i docker0 -p tcp -m tcp --dport 8080 -j DNAT --to-destination 172.17.0.3:8080 COMMIT # Completed on Tue May 22 02:35:08 2018 # Generated by iptables-save v1.6.1 on Tue May 22 02:35:08 2018 *mangle :PREROUTING ACCEPT [109637099:53505462941] :INPUT ACCEPT [90281589:43156856389] :FORWARD ACCEPT [19357332:10349063654] :OUTPUT ACCEPT [92592377:85385932254] :POSTROUTING ACCEPT [111949564:95734984286] COMMIT # Completed on Tue May 22 02:35:08 2018 # Generated by iptables-save v1.6.1 on Tue May 22 02:35:08 2018 *filter :INPUT ACCEPT [2159:617331] :FORWARD ACCEPT [801:40060] :OUTPUT ACCEPT [2059:585762] :DOCKER - [0:0] :DOCKER-ISOLATION - [0:0] -A FORWARD -j DOCKER-ISOLATION -A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A FORWARD -o docker0 -j DOCKER -A FORWARD -i docker0 ! -o docker0 -j ACCEPT -A FORWARD -i docker0 -o docker0 -j ACCEPT -A FORWARD -i eth0 -o tun0 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i tun0 -o eth0 -j ACCEPT -A DOCKER -d 172.17.0.2/32 ! -i docker0 -o docker0 -p tcp -m tcp --dport 3000 -j ACCEPT -A DOCKER -d 172.17.0.2/32 ! -i docker0 -o docker0 -p tcp -m tcp --dport 22 -j ACCEPT -A DOCKER -d 172.17.0.3/32 ! -i docker0 -o docker0 -p tcp -m tcp --dport 8080 -j ACCEPT -A DOCKER-ISOLATION -j RETURN COMMIT # Completed on Tue May 22 02:35:08 2018