Firewall Control on Docker Hosts Using the DOCKER-USER iptables Chain
If you run Docker on production servers, sooner or later you will notice that Docker automatically modifies iptables rules. In many cases this behaviour is convenient, but sometimes it makes it difficult to control network access the way you want.