Search found 6 matches

by alsur
22 Aug 2024, 17:11
Forum: General Discussion (csf)
Topic: csfpre.sh before clearing rules?
Replies: 0
Views: 5424

csfpre.sh before clearing rules?

In order to sort (some) compatibility with Docker and CSF https://forum.configserver.com/viewtopic.php?t=12267&sid=b6b8a74b3299cb94e0ca274cd630d69b we are working on an approach to allow docker to handle its iptables adding a chain on prerouting added in csfpost.sh The problem is that for this t...
by alsur
01 Aug 2024, 11:58
Forum: General Discussion (csf)
Topic: Docker, iptables and csf restarts
Replies: 5
Views: 10959

Re: Docker, iptables and csf restarts

I reopen this old thread as we are back to trying to find a correct working solution for CSF with docker. We've had docker servers behind csf for a while by creating various sets of complicated bash scripts that analyze docker networks and creates required rules. Obviouslly csf needs reloading for e...
by alsur
22 Jul 2024, 14:06
Forum: General Discussion (csf)
Topic: docker with disable iptables and csf firewall
Replies: 1
Views: 6703

Re: docker with disable iptables and csf firewall

Similar situation here, did you find any solution?
Thanks.
by alsur
27 Apr 2022, 20:40
Forum: General Discussion (csf)
Topic: Docker, iptables and csf restarts
Replies: 5
Views: 10959

Re: Docker, iptables and csf restarts

No help here but after long research hours we found our solution via 2 scripts in csfpre and csfpost.sh. Most solutions talk only about docker0 but that is only the default bridge network, any other private bridge created will get a new name and require additional rules. We tested the great setup re...
by alsur
12 Apr 2022, 17:24
Forum: General Discussion (csf)
Topic: Docker, iptables and csf restarts
Replies: 5
Views: 10959

Re: Docker, iptables and csf restarts

We are trying to clarify a similar setup. We want to limit via CSF all incoming external traffic to docker unless allowed in the configuration. With a personalised csfpost.sh generating our own docker rules (disabled in docker server) we've managed it to work but involves reloading every time we cre...
by alsur
06 Jul 2020, 14:48
Forum: General Discussion (csf)
Topic: Correct config for virtual LXC containers
Replies: 0
Views: 2139

Correct config for virtual LXC containers

Hi. I've been using CSF for a while on a PVE (LXC) server. The host has an interface vmbr0 for public address and a vmbr10 that we use as an internal network (10.0.X.X) Most LXC containers only have one of the internal network address as we use a Nginx proxy in one of them to receive all the externa...