News for hackers. Stuff that matters.

A comment on A story on home server security. Parent comment

Re:A story on home server security by Cyph0n on Sunday January 05, 2025 @11:14AM (#42602734)
Are you sure about that? Because I was under the impression that these firewall rules are configured by Docker. So if you use Docker Compose with Podman emulating the Docker socket, this shouldn’t happen.

Maybe someone more knowledgeable can comment.

[ Parent | on HN ]
Re:A story on home server security by smarx007 on Sunday January 05, 2025 @12:02PM (#42603122)
I think you are both correct, see https://news.ycombinator.com/item?id=42602429 - the socket would still listen on 0.0.0.0 but podman would not punch holes.
[ Parent | on HN ]
Re:A story on home server security by Cyph0n on Sunday January 05, 2025 @01:09PM (#42603644)
Aha, thanks for confirming! Yes, this was the behavior I was talking about.

I encountered it with Docker on NixOS and found it confusing. They have since documented this behavior: https://search.nixos.org/options?channel=24.11&show=virtuali...

[ Parent | on HN ]