Comments (2)
You can just run iptables in the network namespace for dropping packets by the source address that is visible in the network namespace, does that work for you?
from slirp4netns.
@AkihiroSuda
Hey :)
This approach works if I want to drop packages from inside the namespace (=blacklisting)
I don't think it will work if I want to leave all packets from the namespace untouched, but disallow everything else outside the namespace (=whitelisting)
from slirp4netns.
Related Issues (20)
- Request Debian to update slirp4netns package HOT 2
- question: how to enable legacy behavior for --network=host for rootless HOT 2
- stalled transfers in container for 5 seconds
- FAIL tests/test-slirp4netns-seccomp.sh (`unshare failed: Operation not permitted`) HOT 2
- slirp4netns fails when used as networking for rootlesskit in Alpine HOT 2
- rootless podman is not able to connect to the external ipv6 network HOT 2
- Instances aren't able to handle jumbo udp packets. HOT 1
- slirp4netns startup issue for path-based configuration
- Please change the "master branch to "main".
- Interaction with bwrap --dev HOT 1
- Load search domains from /etc/resolv.conf
- Rootless Podman can not create containers that bind to privileged (< 1024) ports HOT 3
- rootless Podman-compose containers cannot reach eachother HOT 1
- built-in dns broken with enable-sandbox HOT 1
- port is not bound on all IPs on the host when using --network=slirp4netns:port_handler=slirp4netns
- `--enable-sandbox` is not compatible with `--userns-path=... --netns-type=path` HOT 1
- Cannot pull images with rootless docker on openSUSE Tumbleweed HOT 2
- Access a service from the same ip:port in both a container and the host/lan (docker rootless) HOT 1
- [NixOS] Handling multi-layer and parent symlinks for `/etc/resolv.conf` HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from slirp4netns.