Arch Linux

hachel

Member

Registered: 2011-05-03

Posts: 25

Remove *nat table from iptables (from docker)

Hi there,

I've set up port knocking according to the arch linux wiki's page and everything works fine. I've since installed docker and after some experimenting removed it again. Ever since there are some additions in my iptables.rules file which, as far as I understand, have to do with port forwarding for docker (since it's a *nat table). I was able to remove the rules from my *filter table but the whole *nat table keeps reappearing every time I do iptables-save > /etc/iptables/iptables.rules. This is what the iptables.rules looks like:

# Generated by iptables-save v1.6.0 on Tue Oct  4 10:37:08 2016
*nat
:PREROUTING ACCEPT [610:162332]
:INPUT ACCEPT [2:167]
:OUTPUT ACCEPT [33:3024]
:POSTROUTING ACCEPT [36:3144]
:DOCKER - [0:0]
-A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
-A DOCKER -i docker0 -j RETURN
COMMIT
# Completed on Tue Oct  4 10:37:08 2016
# Generated by iptables-save v1.6.0 on Tue Oct  4 10:37:08 2016
*filter
:INPUT DROP [0:0]
...

When I delete that by hand from the file and use

iptables-restore < /etc/iptables/iptables.rules

and afterwards use

iptables-save > /etc/iptables/iptables.rules

the whole *nat section is back again. How would I remove that?

thanks