Docker and UFW: The Silent Security Hole and How to Fix It
If you are running a Linux server, you probably rely on UFW (Uncomplicated Firewall) to secure it. You run ufw default deny incoming, open SSH, and feel safe. Then, you install Docker. You spin up a container with -p 8080:80 and suddenly, port 8080 is open to the entire world even if UFW says it should be blocked. This isn’t a …