Re: Problems accessing host from docker container running on host
Vieri Di Paola <[email protected]> Fri, 21 Mar 2025 14:08:34 +0100
| Newsgroups | gmane.comp.security.shorewall |
|---|---|
| Message-ID | <CABLYT9iBJoQuN9fLAFtKPLUKyCQf46GN2ZNtDBR9AoL0-poHVw@mail.gmail.com> |
--===============0454242815386897037== Content-Type: multipart/alternative; boundary="0000000000007bfee50630d9f484" --0000000000007bfee50630d9f484 Content-Type: text/plain; charset="UTF-8" On Fri, Mar 21, 2025, 13:16 Winston Sorfleet <[email protected]> wrote: > Well, it would seem to me that's the problem - your VM is in the Docker > zone, and the host you want to access is in the Fw zone. But OP has 'all all ACCEPT' as policy. Try setting to 'all all ACCEPT INFO' and confirm in logs that you see the traffic you need. If outgoing ok but no reply, you might want to check routing tables. Are the replies routed back as expected to the right interface? --0000000000007bfee50630d9f484 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"auto"><div><br><br><div class=3D"gmail_quote gmail_quote_contai= ner"><div dir=3D"ltr" class=3D"gmail_attr">On Fri, Mar 21, 2025, 13:16 Wins= ton Sorfleet <<a href=3D"mailto:[email protected]">[email protected]</a>> w= rote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex= ;border-left:1px #ccc solid;padding-left:1ex">Well, it would seem to me tha= t's the problem - your VM is in the Docker <br> zone, and the host you want to access is in the Fw zone.</blockquote></div>= </div><div dir=3D"auto"><br></div><div dir=3D"auto">But OP has 'all all= ACCEPT' as policy.</div><div dir=3D"auto">Try setting to 'all all = ACCEPT INFO' and confirm in logs that you see the traffic you need.</di= v><div dir=3D"auto">If outgoing ok but no reply, you might want to check ro= uting tables.</div><div dir=3D"auto">Are the replies routed back as expecte= d to the right interface?</div><div dir=3D"auto"><br></div><div dir=3D"auto= "></div></div> --0000000000007bfee50630d9f484-- --===============0454242815386897037== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============0454242815386897037== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline