Firewall Module - Fix Rules

salt/firewall/init.sls

@@ -50,11 +50,16 @@ enable_reject_policy:
       - iptables: iptables_allow_ssh
       - iptables: iptables_allow_pings
 
-# Delete the RETURN rule
+# Enable global DOCKER-USER block rule
-del_return_rule:
+enable_docker_user_fw_policy:
-  iptables.delete:
+  iptables.insert:
+    - table: filter
     - chain: DOCKER-USER
-    - jump: RETURN
+    - jump: DROP
+    - in-interface: '!docker0'
+    - out-interface: docker0
+    - position: 1
+    - save: true
 
 # Rules if you are a Master
 {% if grains['role'] == 'so-master' %}
@@ -155,10 +160,3 @@ enable_standard_beats_5044_{{ip}}:
 # Rules if you are a Warm Node
 
 # Some Fixer upper type rules
-
-# Enable global DOCKER-USER block rule
-enable_docker_user_fw_policy:
-  iptables.append:
-    - table: filter
-    - chain: DOCKER-USER
-    - jump: DROP

salt/master/files/registry/config.yml

@@ -21,4 +21,3 @@ health:
     threshold: 3
 proxy:
   remoteurl: https://registry-1.docker.io
-