[block access from docker container] block access from a specific docker container #docker #iptables #bash

iptables_block_access_from_container.sh

#!/usr/bin/env bash

# BLOCK ACCESS FROM CONTAINER:
CONTAINER='pricing-service'

# prep
IP_ADDRESS=$(docker inspect --format='{{range .NetworkSettings.Networks}}{{print .IPAddress}}{{end}}' $(docker ps | awk -v service="$CONTAINER" '$0~service{print $1}'))

# to block
iptables -I DOCKER-USER -i docker0 -s ${IP_ADDRESS}/32 -j REJECT --reject-with icmp-host-unreachable
#or
iptables -I DOCKER-USER -i docker0 -s ${IP_ADDRESS}/32 -j DROP

# to unblock
iptables -D DOCKER-USER 1