https://fosstodon.org/@kaan/111115650638414379 Just figured out this mystery: #Docker bypasses #UFW because it sets up its routing rules before UFW. I don’t think this was in their docs when I was dealing with this, it is now at least.