So one way is to add it to the daemon.json file (see above)
+
+
{
+
"iptables": false
+
}
+
+
And note:
+
+
Restart the Docker daemon and voila: your containers will not be exposed to every possible interface but you will need to explicitly manipulate your iptables rules if you want the traffic to pass through, e.g.: this is needed to NAT your containers:
+
+
+
-A POSTROUTING -s 172.17.0.0/24 -o eth0 -j MASQUERADE