Search results

After looking at the guidance you provided I'm still not sure how this would work with dynamic IP addressing. Here's what I'm trying to do. One firewall to support one machine the (host machine) as well as that same firewall supporting x amount of docker instances that IPs change upon reboot...

Hello, Does the docker integration support docker compose and or Dynamic IP addressing?

FINALLY - That worked. Thanks root@46c7091f2789:/# ping google.com PING google.com (142.250.138.139) 56(84) bytes of data. 64 bytes from rw-in-f139.1e100.net (142.250.138.139): icmp_seq=1 ttl=55 time=4.02 ms 64 bytes from rw-in-f139.1e100.net (142.250.138.139): icmp_seq=2 ttl=55 time=4.09 ms 64...

root@test-fwcloud-u20:~# tcpdump -n -i docker0 port 53 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on docker0, link-type EN10MB (Ethernet), capture size 262144 bytes 19:20:03.702307 IP 172.17.0.2.59838 > 192.168.1.1.53: 9004+ A? google.com. (28)...

Over 60hrs spent looking at this docker DNS issue with not progress. Even adding DNS service in the INPUT chain of the host and coming from the Docker interface did not work. Any he;p would be appreciated.

That works root@46c7091f2789:/# ping 8.8.8.8 PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=114 time=2.19 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=114 time=2.10 ms 64 bytes from 8.8.8.8: icmp_seq=3 ttl=114 time=2.18 ms 64 bytes from 8.8.8.8: icmp_seq=4...

No root@46c7091f2789:/# ping www.google.com ping: www.google.com: Temporary failure in name resolution root@46c7091f2789:/#

Change made - No error this time. see attachment

FWCloud-Websrv - v1.0.8 FWCloud-UI - v1.6.0 FWCloud-API - v1.7.1 FWCloud-Updater - v1.0.7 see attachment

Translated source added - However, there's an a syntax error at the bottom of the log. [11:20:00] - OUTPUT CHAIN: [11:20:00] - Rule 1 (ID: 13) [11:20:00] - Rule 2 (ID: 15) [11:20:00] - FORWARD CHAIN: [11:20:00] - Rule 1 (ID: 9) [11:20:00] - Rule 2 (ID: 18) [11:20:00] - Rule 3 (ID: 11)...

That's correct.

Yes, i have and that works.

See attachment When you say service are you talking about the service the container is providing? If so, it varies, it could be a web application (e.g. fwcloud).

I would like to accomplish both. Docket Container Internet access and service supplied by the Docker container See attachment: You need to change to .docx

Yes it is set .......................................... sysadmin@test-fwcloud-u20:~$ vi /etc/docker/daemon.json ......................................... { "iptables": false } ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

sysadmin@test-fwcloud-u20:~$ ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host...

- Linux Distribution. Ubuntu 20.04.5 LTS (GNU/Linux 5.4.0-132-generic x86_64) - Docker versión. Client: Docker Engine - Community Version: 20.10.21 API version: 1.41 Go version: go1.18.7 Git commit: baeda1f Built: Tue Oct 25 18:02:21 2022 OS/Arch...

First - I have attached the "policy script" for your review. (see far bottom) .................................................................................................................................... Second - Here is the configuration, which is just like your instructions (see...

In SNAT what is "Translated Source" and what does it need to be set to?

Thanks - Is there a way to view what's being block via ssh or in the log somewhere?