Arko Dasgupta

Hi @browncrane, would really appreciate it if you could share the exact steps to recreate this issue . ``` docker run --name somecontainer -d alpine Step2 Step3 ......... docker rm...

@CrazyNash can you also please share the repro steps

@guillon I have not tried this out, but `kube-proxy` fixed this issue by inserting a similar rule in the FORWARD chain https://github.com/kubernetes/kubernetes/pull/74840

@guillon if you can share your reproduction steps, I'd be happy to take a stab at it as well

@guillon awesome work with the repro steps and the comments, was able to recreate this issue very easily I observed that these `INAVLID` packets traverse from the `PREROUTING` to `INPUT`...

Thanks for describing the background, in this case is there any way to capture packets on both ends and determine if the WAN router and host are abiding by the...

Would it be possible to raise this issue with the conntreck folks, and see if this behavior is intentional or not before we consider adding such a rule

Thanks for raising a PR @tomkcook Can you please 1. Sign your PR using the steps mentioned above 2. Elaborate what you did, and why you did it in the...

these changes look good @tomkcook we might need to remove the check you brought up earlier https://github.com/docker/libnetwork/issues/2488#issuecomment-571746499 thoughts ? @euanh @selansen @thaJeztah

@thaJeztah no, only suggesting we rewrite it to ``` {d.config.EnableIPTables, setupBridgeNetFiltering},) ```