On Fri, Oct 20, 2023 at 3:40 AM jdow <j...@earthlink.net> wrote:
>
> On 20231019 19:15:47, David King wrote:
>
> On 10/19/23 21:53, Jonathan Billings wrote:
>
> On Oct 19, 2023, at 10:05, Alex <mysqlstud...@gmail.com> wrote:
>
> I'm using docker on fedora38 and can't figure out how to prevent port 8080
> from being available to the outside world. I've done quite a bit of reading
> on this, and it appears I'm not the only one having trouble figuring this
> out. This docker doc appears to indicate it shouldn't be listening on the
> external port when the -p option is not used.
>
> https://docs.docker.com/network/#the-world
>
> You should be using firewalld to limit access to services running in docker,
> as described here:
>
> https://docs.docker.com/network/packet-filtering-firewalls/#integration-with-firewalld
>
> Indeed. Fedora deprecated iptables a while ago. It uses nftables now with
> firewalld being used to configure it.
>
> And finally you can even set up a filter that allows a specific source to
> attempt a connection no more often than once every 90 seconds. Before I found
> that the IPTables "recent" option was the only solution newer than ipchains
> where I first used the trick. I bet something as simple as "horsehair" is far
> enough down the guess list that the probability of a successful attack is out
> at way more time than I have life left. When you can put time on your side
> life's great.
>
> Now, presuming he has another setup problem similar to the one I nominally
> found a potential solution for two days ago and have not implemented yet can
> you answer his actual question rather than accuse him of being a dunce using
> the wrong and deprecated tool on the off hand chance he has a worthwhile
> reason? It would be the polite thing to do, wouldn't it?
Hmmm... I think your assessment of the exchange was wrong. JB and DK
merely stated facts. They were not rude, and they did not speak
condescendingly.
For completeness, here is JB's response. It is not clear from your
quoting style:
> You should be using firewalld to limit access to services
running in docker, as described here:
>
>
https://docs.docker.com/network/packet-filtering-firewalls/#integration-with-firewalld
And DK's response:
> Indeed. Fedora deprecated iptables a while ago. It uses nftables now
> with firewalld being used to configure it.
Perhaps you are conflating terseness with rudeness?
Jeff
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
