Five Ways to Not Firewall a Windows Container (and the One That Works)
Five different Windows firewall approaches failed to stop a container from reaching my home network. The sixth, a different network mode for the container, finally worked.
ephemerd runs CI jobs from pull requests. One of the rules is that a job can
reach the internet but not my LAN. On Linux that’s a few iptables rules in the FORWARD path, and I didn’t think about it
much. On Windows I spent about a week finding out how many ways there are to write a firewall rule that Windows accepts,
lists and never applies.
