New ‘Meow’ attack has deleted almost 4k unsecured databases

Re:New ‘Meow’ attack has deleted almost 4k unsecured databases by BrandoElFollito on Monday July 27, 2020 @07:58AM (#23964241)

I do not understand what you mean by "priority over the system ones"

A docker container can have internal ports exposed explicitly, or use host networking. In any case these are ports exposed by the docker-proxy executable - an executable like any other on the system.

Then come the iptables rules of the system (which open or not data flow to the ports exposed by docker-proxy).

Or is it different?

[ Parent | on HN ]

Re:New ‘Meow’ attack has deleted almost 4k unsecured databases by BrandoElFollito on Monday July 27, 2020 @08:03AM (#23964269)

Ah, now I get what you mean - that entries such as

    ACCEPT     tcp  --  anywhere             172.19.0.10          tcp dpt:8843

are created by docker, independently from the configuration of iptables themselves.

[ Parent | on HN ]

Re:New ‘Meow’ attack has deleted almost 4k unsecured databases by Sebb767 on Tuesday July 28, 2020 @05:48AM (#23974046)

Taking precedence was not the ideal word - it uses the same ip tables, but it inserts its own table as the first one. Therefore it 'ignores' system rules, which might come at a surprise.

[ Parent | on HN ]