Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

just my two cents that netfilter (for which iptables is a frontend) is a kernel subsystem and therefore global to all containers on host.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: