Tutorials

DockerLinuxNginxSecurityNetworkingSelf-hostingWeb ServerReverse ProxyVPSDebianUbuntuFirewallVirtual HostsBGPRPKIBIRD2FRRoutingVyOSAnycastSSHFail2Bann8nDocker ComposePostgreSQLWorkflow AutomationSSLTLSLet's EncryptCertbotHTTPStmuxTerminalVPS AdministrationClaude CodeAI ToolsRIPE NCCUFWiptablesGNU ScreenTerminal MultiplexerScreen SessionWebhooksSelf-Hostedproxy_passWebSocketOllamaAI AgentsMCPsshd_configEd25519Rootless DockerSeccompAppArmorContainersOpenClawHermes AgentRoutingIPv6systemdFRRTypeScriptNode.jsROARoutinatorAI AgentTelegramVimText EditorServer AdministrationAIOpsObservabilityMonitoringSigNozGrafanaLangfusePrometheusIP TransitProductionLoggingDisk ManagementOpenObserveOpenTelemetryDatadog AlternativeGDPRnftablesLokiPromtailLogQLClaudeAI WorkflowsLangChainBackupMySQLS3RcloneCronPythonLog AnalysisDiscordSlackDisaster RecoveryTraefikCaddyWireGuardTailscaleVPNHeadscaleAlertmanagerSelf-HealingPerformanceZero DowntimeGitHub ActionsAI Code ReviewGeminiCI/CDRate LimitingDDoS ProtectionBIND9DNSHigh AvailabilityPrivacyVaultwardenPassword ManagerBGPalerterPlakarEncryptionDeduplicationImmichPhoto ManagementGoogle Photos AlternativeReplicationOffsite BackupPaperless-ngxDocument ManagementOCRGiteaGitPlausibleAnalyticsClickHouseUptime KumaBeszelHardeningFailoverMultihomingBFDLLM ObservabilityDeepEvalWindows ServerVeeamMigrationBare Metal RestoreVirtIOP2V
Tutorial
DockerUFWiptables

Fix Docker Bypassing UFW: 4 Tested Solutions for Your VPS

Docker manipulates iptables directly and ignores UFW rules. Your container ports are exposed to the internet even with ufw deny active. Here are four solutions with tradeoffs, each verified by scanning from an external host.

11 min readRead →