I discovered thousands of open databases on AWS

Re:I discovered thousands of open databases on AWS by remram on Tuesday March 15, 2022 @09:11AM (#30684778)

The Docker container is using a separate network namespace with a separate virtual interface that packets are routed to. The "PREROUTING" chain runs before the "INPUT" chain so yes, the rules you put in "INPUT" won't apply.

[ Parent | on HN ]

Re:I discovered thousands of open databases on AWS by rzzzt on Tuesday March 15, 2022 @10:15AM (#30685562)

Its rules also go into the "nat" table instead of the "filter" table. Use "iptables -L -t nat" to display them.

[ Parent | on HN ]

Re:I discovered thousands of open databases on AWS by remram on Wednesday March 16, 2022 @11:23AM (#30699936)

Or iptables-save (note the nat and filter sections)

[ Parent | on HN ]