iptables inside container doesn't work - NET_ADMIN also didn't help

Question

Hi Folks,  
I have a container with fail2ban on it. On my development computer when I add this to docker-compose:  
Code:

```
    cap_add:
     - NET_ADMIN
     - NET_RAW
```

I can see rules are added to iptables both inside container and outside it and it works properly. When I try the same configuration on EC2 instance, i can see those rules inside container, but not on the host system. What's wrong?  
Thanks in advance.

aario · Answer

Decided to give up with the idea and as the alternative, mount log files of the container into equivalent place on the host system. So a standard fail2ban installation would read those log files and set the host system IP tables accordingly. This worked well.

aario

con risposta 7 anni fa

iptables inside container doesn't work - NET_ADMIN also didn't help

Aggiungi la tua risposta

Contenuto pertinente