{
"nftables": [
{
"metainfo": {
"version": "0.9.8",
"release_name": "E.D.S.",
"json_schema_version": 1
}
},
{
"table": {
"family": "ip",
"name": "nat",
"handle": 1
}
},
{
"chain": {
"family": "ip",
"table": "nat",
"name": "DOCKER",
"handle": 1
}
},
{
"rule": {
"family": "ip",
"table": "nat",
"chain": "DOCKER",
"handle": 12,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "iifname"
}
},
"right": "docker0"
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"return": null
}
]
}
},
{
"rule": {
"family": "ip",
"table": "nat",
"chain": "DOCKER",
"handle": 10,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "iifname"
}
},
"right": "br-ea424c02f773"
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"return": null
}
]
}
},
{
"chain": {
"family": "ip",
"table": "nat",
"name": "POSTROUTING",
"handle": 2,
"type": "nat",
"hook": "postrouting",
"prio": 100,
"policy": "accept"
}
},
{
"rule": {
"family": "ip",
"table": "nat",
"chain": "POSTROUTING",
"handle": 11,
"expr": [
{
"match": {
"op": "!=",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "docker0"
}
},
{
"match": {
"op": "==",
"left": {
"payload": {
"protocol": "ip",
"field": "saddr"
}
},
"right": {
"prefix": {
"addr": "172.17.0.0",
"len": 16
}
}
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"xt": null
}
]
}
},
{
"rule": {
"family": "ip",
"table": "nat",
"chain": "POSTROUTING",
"handle": 9,
"expr": [
{
"match": {
"op": "!=",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "br-ea424c02f773"
}
},
{
"match": {
"op": "==",
"left": {
"payload": {
"protocol": "ip",
"field": "saddr"
}
},
"right": {
"prefix": {
"addr": "172.25.0.0",
"len": 16
}
}
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"xt": null
}
]
}
},
{
"chain": {
"family": "ip",
"table": "nat",
"name": "PREROUTING",
"handle": 5,
"type": "nat",
"hook": "prerouting",
"prio": -100,
"policy": "accept"
}
},
{
"rule": {
"family": "ip",
"table": "nat",
"chain": "PREROUTING",
"handle": 6,
"expr": [
{
"xt": null
},
{
"counter": {
"packets": 312,
"bytes": 19968
}
},
{
"jump": {
"target": "DOCKER"
}
}
]
}
},
{
"chain": {
"family": "ip",
"table": "nat",
"name": "OUTPUT",
"handle": 7,
"type": "nat",
"hook": "output",
"prio": -100,
"policy": "accept"
}
},
{
"rule": {
"family": "ip",
"table": "nat",
"chain": "OUTPUT",
"handle": 8,
"expr": [
{
"match": {
"op": "!=",
"left": {
"payload": {
"protocol": "ip",
"field": "daddr"
}
},
"right": {
"prefix": {
"addr": "127.0.0.0",
"len": 8
}
}
}
},
{
"xt": null
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"jump": {
"target": "DOCKER"
}
}
]
}
},
{
"table": {
"family": "ip",
"name": "filter",
"handle": 2
}
},
{
"chain": {
"family": "ip",
"table": "filter",
"name": "DOCKER",
"handle": 1
}
},
{
"chain": {
"family": "ip",
"table": "filter",
"name": "DOCKER-ISOLATION-STAGE-1",
"handle": 2
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "DOCKER-ISOLATION-STAGE-1",
"handle": 28,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "iifname"
}
},
"right": "docker0"
}
},
{
"match": {
"op": "!=",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "docker0"
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"jump": {
"target": "DOCKER-ISOLATION-STAGE-2"
}
}
]
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "DOCKER-ISOLATION-STAGE-1",
"handle": 21,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "iifname"
}
},
"right": "br-ea424c02f773"
}
},
{
"match": {
"op": "!=",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "br-ea424c02f773"
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"jump": {
"target": "DOCKER-ISOLATION-STAGE-2"
}
}
]
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "DOCKER-ISOLATION-STAGE-1",
"handle": 6,
"expr": [
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"return": null
}
]
}
},
{
"chain": {
"family": "ip",
"table": "filter",
"name": "DOCKER-ISOLATION-STAGE-2",
"handle": 3
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "DOCKER-ISOLATION-STAGE-2",
"handle": 29,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "docker0"
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"drop": null
}
]
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "DOCKER-ISOLATION-STAGE-2",
"handle": 22,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "br-ea424c02f773"
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"drop": null
}
]
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "DOCKER-ISOLATION-STAGE-2",
"handle": 7,
"expr": [
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"return": null
}
]
}
},
{
"chain": {
"family": "ip",
"table": "filter",
"name": "FORWARD",
"handle": 8,
"type": "filter",
"hook": "forward",
"prio": 0,
"policy": "drop"
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "FORWARD",
"handle": 32,
"expr": [
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"jump": {
"target": "DOCKER-USER"
}
}
]
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "FORWARD",
"handle": 27,
"expr": [
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"jump": {
"target": "DOCKER-ISOLATION-STAGE-1"
}
}
]
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "FORWARD",
"handle": 26,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "docker0"
}
},
{
"xt": null
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"accept": null
}
]
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "FORWARD",
"handle": 25,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "docker0"
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"jump": {
"target": "DOCKER"
}
}
]
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "FORWARD",
"handle": 24,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "iifname"
}
},
"right": "docker0"
}
},
{
"match": {
"op": "!=",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "docker0"
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"accept": null
}
]
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "FORWARD",
"handle": 23,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "iifname"
}
},
"right": "docker0"
}
},
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "docker0"
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"accept": null
}
]
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "FORWARD",
"handle": 19,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "br-ea424c02f773"
}
},
{
"xt": null
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"accept": null
}
]
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "FORWARD",
"handle": 18,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "br-ea424c02f773"
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"jump": {
"target": "DOCKER"
}
}
]
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "FORWARD",
"handle": 17,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "iifname"
}
},
"right": "br-ea424c02f773"
}
},
{
"match": {
"op": "!=",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "br-ea424c02f773"
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"accept": null
}
]
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "FORWARD",
"handle": 16,
"expr": [
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "iifname"
}
},
"right": "br-ea424c02f773"
}
},
{
"match": {
"op": "==",
"left": {
"meta": {
"key": "oifname"
}
},
"right": "br-ea424c02f773"
}
},
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"accept": null
}
]
}
},
{
"chain": {
"family": "ip",
"table": "filter",
"name": "DOCKER-USER",
"handle": 30
}
},
{
"rule": {
"family": "ip",
"table": "filter",
"chain": "DOCKER-USER",
"handle": 31,
"expr": [
{
"counter": {
"packets": 0,
"bytes": 0
}
},
{
"return": null
}
]
}
}
]
}