Merge 64455c747a into 9c01d924fb

Add --ip-filter-forward-drop to dockerd cmdline ref
Signed-off-by: Rob Murray <rob.murray@docker.com>
2024-11-06 14:52:13 +00:00 · 2024-11-06 14:47:53 +00:00
1 changed files with 2 additions and 1 deletions
--- a/docs/reference/dockerd.md
+++ b/docs/reference/dockerd.md
@ -71,7 +71,8 @@ Options:
      --init-path string                      Path to the docker-init binary
      --insecure-registry list                Enable insecure registry communication
      --ip ip                                 Default IP when binding container ports (default 0.0.0.0)
-      --ip-forward                            Enable net.ipv4.ip_forward (default true)
+      --ip-filter-forward-drop                Set the filter-FORWARD policy to DROP when enabling IP forwarding (default true)
      --ip-forward                            Enable IP forwarding in system configuration (default true)
      --ip-masq                               Enable IP masquerading (default true)
      --ip6tables                             Enable addition of ip6tables rules (experimental)
      --iptables                              Enable addition of iptables rules (default true)
Author	SHA1	Message	Date
Rob Murray	f95f631b1c	Merge `64455c747a` into `9c01d924fb`	2024-11-06 14:52:13 +00:00
Rob Murray	64455c747a	Add --ip-filter-forward-drop to dockerd cmdline ref Signed-off-by: Rob Murray <rob.murray@docker.com>	2024-11-06 14:47:53 +00:00