10 min read
Docker on a VPS Bypasses Your Firewall: Why It Happens and How to Fix It
Why published Docker ports ignore ufw and nftables INPUT rules, how to fix it with DOCKER-USER and localhost binds, plus real container hardening on a VPS.
Blog topic
firewall
2 published articles
10 min read
nftables Firewall on a VPS: A Practical Baseline Ruleset That Won't Lock You Out
A working nftables baseline for Linux VPS: inet tables, IPv6-safe ICMP rules, SSH allowlists, rate limiting, Docker conflicts, persistence and lockout recovery.