Hi,

https://fedoraproject.org/wiki/Changes/firewalld_default_to_nftables

mentions a

docker-firewalld

where can I find that package or source code?

thanks

–

Hello,

I am using CentOS7 + Docker CE
(docker-ce-18.03.1.ce-1.el7.CentOS.x86_64), in the following setup

1) On interface br-ee1ac3f6bbaf I have network 172.16.26/24
2) Network from (1) is routed via the IP address of eth0 of the CentOS
machine
3) Access to machines in network (1) is direct, without port forwarding

I want to be able to reach other machines in other subnet from the IP
address of the Docker containers. I ran the following command:

firewall-cmd –direct –permanent –add-rule ipv4 nat POSTROUTING 0 -i br+ -o eth0 -s 172.16.26.0/24 -j ACCEPT

However, the firewall rules for NAT are:

-A POSTROUTING -s 172.16.26.0/24 ! -o br-ee1ac3f6bbaf -j MASQUERADE
-A POSTROUTING -j POSTROUTING_direct
-A POSTROUTING_direct -s 172.16.26.0/24 -i br+ -o eth0 -j ACCEPT

With this, it always goes via MASQUERADE first, without hitting the POSTROUTING_direct chain. Is there a way to add this rule on top of POSTROUTING?

Regards,