chaifeng/ufw-docker

Health v2 · maintenance only

Adoption not part of the score

6749 stars · 500 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A shell-based tool that fixes the well-known security flaw where Docker bypasses UFW firewall rules and exposes published ports to the public internet. It works without disabling Docker's iptables management, preserving container networking while enforcing UFW rules.

Use cases

• block docker published ports from external access with ufw
• fix docker bypassing ufw firewall rules
• manage ufw rules for docker containers
• secure docker ports on ubuntu server
• allow only specific ips to access docker container ports
• use ufw with docker without disabling iptables

When to choose

• you run Docker on Ubuntu/Debian with UFW and need published ports protected
• you want to keep Docker's iptables and network management intact
• you need per-container firewall rules via a simple ufw-docker command

When to avoid

• you use firewalld or nftables instead of UFW
• you run Docker on non-Linux platforms
• you prefer binding ports to localhost or a reverse proxy instead of firewall rules

Facets

cli-tool · maturity active

security networking configuration-management cli security networking self-hosted cli ufw firewall docker-networking iptables shell-script docker-swarm containers devops linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="chaifeng/ufw-docker")