Re: Problems accessing host from docker container running on host

"Simon Matter" <[email protected]> Thu, 20 Mar 2025 11:23:58 +0100
Newsgroups gmane.comp.security.shorewall
Message-ID <38497e52bba16fbe21188e9e817b9271.20250320112358.1742466238@xxl.corp.invoca.ch>
PiBUaGFua3MgTWF0dC4KPgo+IFllcyAtIGlmIEkgZG8gYSBzaG9yZXdhbGwgY2xlYXIsIGl0J3Mg
cG9zc2libGUgdG8gYWNjZXNzIHRoZSBob3N0IGZyb20KPiBpbnNpZGUgdGhlIGRvY2tlciBjb250
YWluZXIuIFRoZQo+IGRlZmF1bHQgZG9ja2VyIGlwdGFibGVzIGNvbmZpZyBzZWVtcyB0byBzdXBw
b3J0IHRoaXMuIEhvd2V2ZXIsIHdoZW4gSQo+IGVuYWJsZSBzaG9yZXdhbGwgKHdpdGggZG9ja2Vy
Cj4gc3VwcG9ydCksIGl0J3Mgbm90IHBvc3NpYmxlLgo+Cj4gSXQgcmVhbGx5IHNlZW1zIGxpa2Ug
c29tZSBpbnRlcmFjdGlvbiBiZXR3ZWVuIHRoZSBkb2NrZXIgaXB0YWJsZXMKPiBmdW5jdGlvbmFs
aXR5IGFuZCB0aGUgc2hvcmV3YWxsCj4gaXB0YWJsZXMgZnVuY3Rpb25hbGl0eSBpcyBjYXVzaW5n
IHRoZSBwcm9ibGVtIGFuZCBtb3JlIHNwZWNpZmljYWxseSwgb24KPiB0aGUgcmV0dXJuIHBhdGgg
ZnJvbSB0aGUgc2VydmljZQo+IHJ1bm5pbmcgb24gdGhlIGhvc3QgdG8gdGhlIGRvY2tlciBjb250
YWluZXIuCgpNYXliZSB5b3UgaGF2ZSB0byBjb25maWd1cmUgZG9ja2VyIHNvIHRoYXQgaXQgZG9l
c24ndCBmaWRkbGUgd2l0aCB0aGUKaXB0YWJsZXMgY29uZmlnPwoKU2ltb24KCj4KPiBJdCBjb3Vs
ZCBiZSBzb21ldGhpbmcgb2YgYW4gZWRnZSBjYXNlIGFzIG1vc3RseSB0aGUgcG9pbnQgb2YgaGF2
aW5nCj4gY29udGFpbmVycyBpcyB0byBoYXZlIChzb21lKQo+IGlzb2xhdGlvbiBmcm9tIHRoZSBo
b3N0IGJ1dCB3ZSB0aGluayBpdCBwcm9iIHNob3VsZCBiZSBwb3NzaWJsZSB0byBlZwo+IGFjY2Vz
cyBzdHVmZiBmcm9tIGluc2lkZSB0aGUKPiBjb250YWluZXJzIHdoaWNoIGlzIGFjY2Vzc2libGUg
ZnJvbSBhbnl3aGVyZSBvbiB0aGUgaW50ZXJuZXQuCj4KPiBUaGFua3MgZm9yIGFueSBpbnNpZ2h0
cy4KPgo+IEJSLAo+IFNlYW4uCj4KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
Cj4gU2VhbiBNdXJwaHkKPiBTZW5pb3IgUGxhdGZvcm0gRW5naW5lZXIKPiBzZWFuLm11cnBoeUBk
YXRhaG91c2UuY2gKPiBUICs0MSA0NMKgIDI4OS04NC0yMgo+IHd3dy5kYXRhaG91c2UuY2gKPiBM
aW5rZWRpbsKgfCBZb3VUdWJlCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwo+
Cj4KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCj4gRnJvbTrCoE1h
dHQgRGFyZmV1aWxsZSA8bWF0dEBzaG9yZXdhbGwub3JnPgo+IFNlbnQ6wqBXZWRuZXNkYXksIE1h
cmNoIDE5LCAyMDI1IDg6MTkgUE0KPiBUbzrCoHNob3Jld2FsbC11c2Vyc0BsaXN0cy5zb3VyY2Vm
b3JnZS5uZXQKPiA8c2hvcmV3YWxsLXVzZXJzQGxpc3RzLnNvdXJjZWZvcmdlLm5ldD4KPiBTdWJq
ZWN0OsKgUmU6IFtTaG9yZXdhbGwtdXNlcnNdIFByb2JsZW1zIGFjY2Vzc2luZyBob3N0IGZyb20g
ZG9ja2VyCj4gY29udGFpbmVyIHJ1bm5pbmcgb24gaG9zdAo+IMKgCj4gW1lvdSBkb24ndCBvZnRl
biBnZXQgZW1haWwgZnJvbSBtYXR0QHNob3Jld2FsbC5vcmcuIExlYXJuIHdoeSB0aGlzIGlzCj4g
aW1wb3J0YW50IGF0IGh0dHBzOi8vYWthLm1zL0xlYXJuQWJvdXRTZW5kZXJJZGVudGlmaWNhdGlv
bsKgXQo+Cj4gT24gMy8xOS8yNSAxMDo0OSwgU2VhbiBNdXJwaHkgdmlhIFNob3Jld2FsbC11c2Vy
cyB3cm90ZToKPj4gSGkgYWxsLCwKPj4KPj4gV2UgaGF2ZSBiZWVuIChhYil1c2luZyBzaG9yZXdh
bGwgZm9yIHNvbWUgeWVhcnMgbm93IGFuZCB3ZSdyZSB2IGhhcHB5Cj4+IHdpdGggaXQgLQo+PiB0
aGFua3MgZXZlcnlvbmUgYW5kIFRvbSBpbiBwYXJ0aWN1bGFyIGZvciBzdWNoIGEgZ3JlYXQgdG9v
bC4KPj4KPj4gV2UgaGF2ZSBiZWVuIHVzaW5nIGl0IHRvIG1hbmFnZSBzZWN1cml0eSBmb3IgYSBz
ZXQgb2YgVk1zIHJ1bm5pbmcKPj4gYXBwbGljYXRpb25zCj4+IHdpdGggZG9ja2VyLWNvbXBvc2Uu
IEFsbW9zdCBhbGwgb2Ygb3VyIGhvc3RzIGhhdmUgYSBzaW5nbGUgZXh0ZXJuYWwKPj4gbmV0d29y
awo+PiBpbnRlcmZhY2U7IHRoaXMgaXMgcGVyaGFwcyBub3QgdGhlIHVzZSBjYXNlIGZvciB3aGlj
aCBzaG9yZXdhbGwgd2FzCj4+IGRlc2lnbmVkCj4+IGJ1dCBpdCBoYXMgYmVlbiB3b3JraW5nIGZv
ciB1cyBzbyBmYXIuCj4+Cj4+IFdlIG5vdyBoYXZlIGEgc2NlbmFyaW8gd2hpY2ggaXMgcHJvdmlu
ZyBtb3JlIGRpZmZpY3VsdDogd2Ugd2FudCB0bwo+PiBhY2Nlc3MgYQo+PiBzZXJ2aWNlIHJ1bm5p
bmcgb24gYSBob3N0IGZyb20gd2l0aGluIGEgY29udGFpbmVyLgo+Pgo+PiBXZSBoYXZlIHRyaWVk
IHRoZSBtb3N0IG9wZW4gY29uZmlndXJhdGlvbiBwb3NzaWJsZSAtIGEgcG9saWN5IHdpdGgKPj4g
YWxsOmFsbAo+PiBBQ0NFUFQgYW5kIG5vIHJ1bGVzOyBpdCBzZWVtcyB0aGUgc2VydmljZSBpcyBh
Y2Nlc3NpYmxlIGZyb20gYW55d2hlcmUKPj4gZXhjZXB0Cj4+IGluc2lkZSB0aGUgZG9ja2VyIGNv
bnRhaW5lci4KPj4KPj4gQWNjZXNzaW5nIHRoZSBzZXJ2aWNlIGZyb20gaW5zaWRlIHRoZSBjb250
YWluZXIgcmVzdWx0cyBpbiB0aW1lb3V0cywgc28KPj4gcHJlc3VtYWJseQo+PiB0aGUgcGFja2V0
cyBhcmUgYmVpbmcgZHJvcHBlZCBzb21ld2hlcmUuIFdlIHRyaWVkIHBpbmcsIHNzaCAob24gc3Rh
bmRhcmQKPj4gcG9ydHMpCj4+IGFuZCBhbiBodHRwIHNlcnZpY2UgcnVubmluZyBvbiBhIGhpZ2gg
cG9ydCBudW1iZXIuCj4+Cj4+IFpvbmUgY29uZmlndXJhdGlvbjoKPj4gcm9vdEBkaGl0LWRpc3Bv
c2FibGUwMTovZXRjL3Nob3Jld2FsbCMgY2F0IHpvbmVzCj4+ICMjIyMjIyMjIyMjIyMjIyMjIyMj
IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj
IyMKPj4gI1pPTkXCoMKgwqDCoMKgwqDCoMKgwqDCoCBUWVBFwqDCoMKgwqDCoCBPUFRJT05TwqDC
oMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAKPj4gSU7CoMKgwqDCoMKgwqDCoMKgwqDCoMKg
wqDCoMKgwqDCoMKgwqDCoMKgwqAgT1VUCj4+ICPCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg
wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC
oMKgwqDCoMKgwqAKPj4gT1BUSU9OU8KgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIE9Q
VElPTlMKPj4gZnfCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCBmaXJld2FsbAo+PiBuZXTCoMKg
wqDCoMKgwqDCoMKgwqDCoMKgwqAgaXB2NAo+PiBkb2NrwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCBp
cHY0Cj4+Cj4+IEludGVyZmFjZSBjb25maWd1cmF0aW9uOgo+PiByb290QGRoaXQtZGlzcG9zYWJs
ZTAxOi9ldGMvc2hvcmV3YWxsIyBjYXQgaW50ZXJmYWNlcwo+PiAjIyMjIyMjIyMjIyMjIyMjIyMj
IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj
IyMjCj4+ID9GT1JNQVQgMgo+PiAjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj
IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjCj4+ICNaT05FwqDCoCBJ
TlRFUkZBQ0XCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCBPUFRJT05TCj4+IG5ldMKg
wqDCoMKgIGV0aMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIHBo
eXNpY2FsPWV0aCssZGhjcCxub3NtdXJmcwo+PiBuZXTCoMKgwqDCoCBlbsKgwqDCoMKgwqDCoMKg
wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgcGh5c2ljYWw9ZW4rLGRoY3Asbm9zbXVy
ZnMKPj4gZG9ja8KgwqDCoCBkb2NrZXIwwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC
oMKgIHBoeXNpY2FsPWRvY2tlcisscm91dGViYWNrPTEKPj4gZG9ja8KgwqDCoCBicsKgwqDCoMKg
wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgcGh5c2ljYWw9YnItKyxyb3V0
ZWJhY2s9MQo+Pgo+PiBQb2xpY3kgY29uZmlndXJhdGlvbjoKPj4gcm9vdEBkaGl0LWRpc3Bvc2Fi
bGUwMTovZXRjL3Nob3Jld2FsbCMgY2F0IHBvbGljeQo+PiAjU09VUkNFwqDCoMKgwqDCoMKgwqAg
REVTVMKgwqDCoMKgwqDCoMKgIFBPTElDWcKgwqDCoMKgwqAgTE9HTEVWRUzCoMKgwqAgTElNSVQK
Pj4gYWxswqDCoMKgwqDCoMKgwqDCoMKgwqDCoCBhbGzCoMKgwqDCoMKgwqDCoMKgIEFDQ0VQVAo+
Pgo+PiBSdWxlcyBjb25maWd1cmF0aW9uOgo+PiByb290QGRoaXQtZGlzcG9zYWJsZTAxOi9ldGMv
c2hvcmV3YWxsIyBjYXQgcnVsZXMKPj4gI0FDVElPTsKgwqDCoMKgwqAgU09VUkNFwqDCoMKgwqDC
oMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCBERVNUwqDCoMKgwqDCoMKgIFBST1RPwqDCoMKgwqDC
oCBEUE9SVAo+PiAjIE5vIHJ1bGVzCj4+Cj4+IERvY2tlciBjb25maWd1cmF0aW9uIGFzIHBlciBz
aG9yZXdhbGwuY29uZgo+PiByb290QGRoaXQtZGlzcG9zYWJsZTAxOi9ldGMvc2hvcmV3YWxsIyBn
cmVwIC1pIGRvY2tlciBzaG9yZXdhbGwuY29uZgo+PiAjIERlZmF1bHQgc2hvcmV3YWxsIGNvbmZp
ZywgZXhjZXB0IGZvciBET0NLRVI9WWVzIChhbmQgdGhpcyBjb21tZW50KS4KPj4gRE9DS0VSPVll
cwo+PiBET0NLRVJfQlJJREdFPWRvY2tlcjAKPj4KPj4gSSBkaWQgc2hvcmV3YWxsIGNvbXBpbGUs
IHNhZmUtcmVsb2FkIGFuZCB0aGVuIHJlc3RhcnRlZCB0aGUgZG9ja2VyCj4+IGRlYW1vbiBidXQK
Pj4gdGhlIHBhY2tldHMgc3RpbGwgc2VlbSB0byBiZSBiZWluZyBkcm9wcGVkLiBJIHRyaWVkIGlw
dGFibGVzLXRyYWNlciBbMV0KPj4gdG8gZ2V0IHNvbWUKPj4gaW5mbyBvbiB3aGVyZSB0aGV5IGRp
c2FwcGVhciBhbmQgaXQgc2VlbXMgcGFja2V0cyBhcmUgYmVpbmcgZHJvcHBlZCBvbgo+PiB0aGUK
Pj4gcmV0dXJuIHBhdGguCj4KPiBJZiB5b3UgZG8gYSBgc2hvcmV3YWxsIGNsZWFyYCwgZG9lcyBp
dCB3b3JrIGF0IGFsbD8KPgo+Cj4gTm90ZSB0aGF0IHRoZSBwcm9qZWN0IGlzIHVubWFpbnRhaW5l
ZC4KPgo+IC0tCj4gTWF0dCBEYXJmZXVpbGxlIDxtYXR0QHNob3Jld2FsbC5vcmc+Cj4gVW5tYWlu
dGFpbmVkIHByb2plY3QsIG5vIG1vcmUgcmVsZWFzZXMgb3IgYnVnIGZpeGVzCj4gQ29tbXVuaXR5
OiBodHRwczovL3NvdXJjZWZvcmdlLm5ldC9wL3Nob3Jld2FsbC9tYWlsbWFuL21lc3NhZ2UvMzcx
MDcwNDkvCj4KPgo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fCj4gU2hvcmV3YWxsLXVzZXJzIG1haWxpbmcgbGlzdAo+IFNob3Jld2FsbC11c2Vyc0BsaXN0
cy5zb3VyY2Vmb3JnZS5uZXQKPiBodHRwczovL2xpc3RzLnNvdXJjZWZvcmdlLm5ldC9saXN0cy9s
aXN0aW5mby9zaG9yZXdhbGwtdXNlcnMKPgo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fCj4gU2hvcmV3YWxsLXVzZXJzIG1haWxpbmcgbGlzdAo+IFNob3Jl
d2FsbC11c2Vyc0BsaXN0cy5zb3VyY2Vmb3JnZS5uZXQKPiBodHRwczovL2xpc3RzLnNvdXJjZWZv
cmdlLm5ldC9saXN0cy9saXN0aW5mby9zaG9yZXdhbGwtdXNlcnMKPgoKCgoKX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KU2hvcmV3YWxsLXVzZXJzIG1haWxp
bmcgbGlzdApTaG9yZXdhbGwtdXNlcnNAbGlzdHMuc291cmNlZm9yZ2UubmV0Cmh0dHBzOi8vbGlz
dHMuc291cmNlZm9yZ2UubmV0L2xpc3RzL2xpc3RpbmZvL3Nob3Jld2FsbC11c2Vycwo=