[GH-ISSUE #215] CentOS8 server use Docker Mode #200

Closed
opened 2026-03-02 07:44:42 +03:00 by kerem · 0 comments
Owner

Originally created by @suzhouclark on GitHub (Nov 27, 2020).
Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/215

CentOS8 server use Docker Mode

  1. I can use VPN connect.
  2. physical server firewalld is running.
  3. Iptables --list is following.
  4. I can ping both vpn server ip 192.168.42.1 , docker ip 172.17.0.2 and physical server ip from remote pc

I can't use access http server on vpn physical server
And I can't access internet.

Could you give me some suggestions?

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy DROP)
target prot opt source destination
DOCKER-USER all -- anywhere anywhere
DOCKER-ISOLATION-STAGE-1 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
DOCKER all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain DOCKER (1 references)
target prot opt source destination
ACCEPT udp -- anywhere 172.17.0.2 udp dpt:ipsec-nat-t
ACCEPT udp -- anywhere 172.17.0.2 udp dpt:isakmp

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere

Chain DOCKER-ISOLATION-STAGE-2 (0 references)
target prot opt source destination
RETURN all -- anywhere anywhere

Chain DOCKER-USER (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere

Originally created by @suzhouclark on GitHub (Nov 27, 2020). Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/215 CentOS8 server use Docker Mode 1. I can use VPN connect. 2. physical server firewalld is running. 3. Iptables --list is following. 4. I can ping both vpn server ip 192.168.42.1 , docker ip 172.17.0.2 and physical server ip from remote pc I can't use access http server on vpn physical server And I can't access internet. Could you give me some suggestions? Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy DROP) target prot opt source destination DOCKER-USER all -- anywhere anywhere DOCKER-ISOLATION-STAGE-1 all -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED DOCKER all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain DOCKER (1 references) target prot opt source destination ACCEPT udp -- anywhere 172.17.0.2 udp dpt:ipsec-nat-t ACCEPT udp -- anywhere 172.17.0.2 udp dpt:isakmp Chain DOCKER-ISOLATION-STAGE-1 (1 references) target prot opt source destination RETURN all -- anywhere anywhere Chain DOCKER-ISOLATION-STAGE-2 (0 references) target prot opt source destination RETURN all -- anywhere anywhere Chain DOCKER-USER (1 references) target prot opt source destination RETURN all -- anywhere anywhere
kerem closed this issue 2026-03-02 07:44:42 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/docker-ipsec-vpn-server#200
No description provided.