Tag Info

New answers tagged


You can define a ACCEPT rule before your DNAT rule. As usual in iptables, the first matched rule will be applied and no more (can have exception like LOG). So define a rule with -j ACCEPT for your internal networks before a rule with -j DNAT like you propose. The source IP can be defined in -s and a name can be used, but it will be translated in ...


The trick is to get iptables to redirect only the connections from the DEV Env containers. We can do this by adding a rule to accept all connections from the Reverse Proxy. So the IP table rules will now become: -A PREROUTING -i docker0 -s -j ACCEPT -A PREROUTING -i docker0 -s -j ACCEPT -A PREROUTING -i docker0 -p tcp -d 0/0 -j ...

Top 50 recent answers are included