diff --git a/network/iptables.md b/network/iptables.md index efd59b0e27..86aed84d90 100644 --- a/network/iptables.md +++ b/network/iptables.md @@ -10,9 +10,9 @@ inserts into your `iptables` policies. ## Add iptables policies before Docker's rules -All of Docker's `iptables` rules are added to the `DOCKER` table. Do not +All of Docker's `iptables` rules are added to the `DOCKER` chain. Do not manipulate this table manually. If you need to add rules which load before -Docker's rules, add them to the `DOCKER-USER` table. These rules are loaded +Docker's rules, add them to the `DOCKER-USER` chain. These rules are loaded before any rules Docker creates automatically. ### Restrict connections to the Docker daemon @@ -58,4 +58,4 @@ for most users, because the `iptables` policies then need to be managed by hand. ## Next steps -- Read [Docker Reference Architecture: Designing Scalable, Portable Docker Container Networks](https://success.docker.com/Architecture/Docker_Reference_Architecture%3A_Designing_Scalable%2C_Portable_Docker_Container_Networks) \ No newline at end of file +- Read [Docker Reference Architecture: Designing Scalable, Portable Docker Container Networks](https://success.docker.com/Architecture/Docker_Reference_Architecture%3A_Designing_Scalable%2C_Portable_Docker_Container_Networks)