iptables
Archives

I spent an evening fixing a problem open since 2014: ufw does not protect Docker published ports. My firewall said three ports were open. Twelve were, including a control panel that can open a shell. But this post is about a decision I made when publishing the fix: there is no executable script in the repository. Part one is the bug and the three traps I hit; part two is why it cannot be a script, and where that approach stops working.

```html The current situation is as follows: Both locations only have public IPv4 addresses. The public IP addr…