clearlinux/docker
2
0
Fork 0
mirror of https://github.com/clearlinux/docker.git synced 2026-08-20 12:45:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Prevent inter-container communication

Browse Source
This commit is contained in:
Michael Crosby
2013-09-16 22:48:30 +00:00
parent 9d150f02f9
commit adecaeb40b
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
network.go
+4
View File
@@ -170,6 +170,10 @@ func CreateBridgeIface(config *DaemonConfig) error {
"!", "-d", ifaceAddr, "-j", "MASQUERADE"); err != nil {
return fmt.Errorf("Unable to enable network bridge NAT: %s", err)
}
// Prevent inter-container communication by default
if err := iptables.Raw("-A", "FORWARD", "-i", config.BridgeIface, "-o", config.BridgeIface, "-j", "DROP"); err != nil {
return fmt.Errorf("Unable to prevent intercontainer communication: %s", err)
}
}
return nil
}