IPtables not working in LXC proxy container

LXD
, ,
1

Hello @stgraber ,

Hope you are doing ok ,

I have a container in which nginx is running and on this container port 80 and 443 are bound
and this container is routing traffic to different containers where the different websites resides , now i want to reject specific public IP access to the proxy container i made some rules in iptables but they are not working not dropping the access of specific IP.

FYI : vm instance is on GCP
OS =debian9

can you please guide me how iptables works in lxc containers

2

How does your proxy container become accessible to the Internet?
Do you use IPtables rules or do you use LXD proxy devices?

3

Thanks for replying :slight_smile:
i used LXD proxy device

4

@simos awaiting for your reply . can you please help how to implement iptables in lxc container

5

You use a LXD proxy device, which means that the iptables rules have to work before the LXD proxy device receives the network connection.
Do your rules use INPUT? Try with PREROUTING.

6

i am using INPUT ? what do you suggests ?

7

Okay, this one is important. AFAIK, GCP gives out a private IP address to your VM.

  1. Try to verify that your iptables rules really work on your workstation. Therefore, you will be confident that you got the correct rules. Tell us the results of this test.
  2. Shows us an example of such a rule.