{"action":"created","issue":{"url":"https://api.github.com/repos/containers/libpod/issues/1119","repository_url":"https://api.github.com/repos/containers/libpod","labels_url":"https://api.github.com/repos/containers/libpod/issues/1119/labels{/name}","comments_url":"https://api.github.com/repos/containers/libpod/issues/1119/comments","events_url":"https://api.github.com/repos/containers/libpod/issues/1119/events","html_url":"https://github.com/containers/libpod/issues/1119","id":343127166,"node_id":"MDU6SXNzdWUzNDMxMjcxNjY=","number":1119,"title":"Cannot access forwarded ports remotely","user":{"login":"mheon","id":7735048,"node_id":"MDQ6VXNlcjc3MzUwNDg=","avatar_url":"https://avatars3.githubusercontent.com/u/7735048?v=4","gravatar_id":"","url":"https://api.github.com/users/mheon","html_url":"https://github.com/mheon","followers_url":"https://api.github.com/users/mheon/followers","following_url":"https://api.github.com/users/mheon/following{/other_user}","gists_url":"https://api.github.com/users/mheon/gists{/gist_id}","starred_url":"https://api.github.com/users/mheon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mheon/subscriptions","organizations_url":"https://api.github.com/users/mheon/orgs","repos_url":"https://api.github.com/users/mheon/repos","events_url":"https://api.github.com/users/mheon/events{/privacy}","received_events_url":"https://api.github.com/users/mheon/received_events","type":"User","site_admin":false},"labels":[{"id":913728026,"node_id":"MDU6TGFiZWw5MTM3MjgwMjY=","url":"https://api.github.com/repos/containers/libpod/labels/Third%20Party","name":"Third Party","color":"e011a5","default":false},{"id":737625777,"node_id":"MDU6TGFiZWw3Mzc2MjU3Nzc=","url":"https://api.github.com/repos/containers/libpod/labels/bug","name":"bug","color":"ee0701","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-07-20T14:23:34Z","updated_at":"2018-09-10T00:55:14Z","closed_at":null,"author_association":"COLLABORATOR","body":"**Is this a BUG REPORT or FEATURE REQUEST?**:\r\n\r\n/kind bug\r\n\r\n**Description**\r\n\r\nPorts forwarded to a container with Podman are accessible locally, but cannot be accessed by remote hosts.\r\n\r\n**Steps to reproduce the issue:**\r\n\r\n1. One machine 1: `podman run -d -p 80:80 -v <SOME_LOCAL_DIR>:/usr/share/nginx/html:ro nginx`\r\n\r\n2. On machine 1: `iptables -t nat -S CNI-HOSTPORT-DNAT` to verify firewall rules are created\r\n\r\n3. On machine 1: `telnet localhost 80` to verify local connectivity to HTTP server\r\n\r\n4. On another machine: `telnet <IP_OF_MACHINE_1> 80` to verify remote connectivity to HTTP server\r\n\r\n**Describe the results you received:**\r\n\r\nIPTables output: \r\n`\r\n-N CNI-HOSTPORT-DNAT\r\n-A CNI-HOSTPORT-DNAT -p tcp -m comment --comment \"dnat name: \\\"podman\\\" id: \\\"3bcb5133e8731ff31cc524756ca7b920bd7d69f0e5b5c675ee99ec0e316bc190\\\"\" -m multiport --dports 80 -j CNI-DN-5d19ae988c93f23cd5102\r\n-A CNI-HOSTPORT-DNAT -p udp -m comment --comment \"dnat name: \\\"podman\\\" id: \\\"3bcb5133e8731ff31cc524756ca7b920bd7d69f0e5b5c675ee99ec0e316bc190\\\"\" -m multiport --dports 80 -j CNI-DN-5d19ae988c93f23cd5102\r\n`\r\nLocal connection to port 80 succeeds, remote connection fails\r\n\r\n**Describe the results you expected:**\r\n\r\nLocal and remote connections both succeed\r\n\r\n**Additional information you deem important (e.g. issue happens only occasionally):**\r\n\r\n**Output of `podman version`:**\r\n\r\nF28 packaged 0.7.1\r\n\r\n**Additional environment details (AWS, VirtualBox, physical, etc.):**\r\n"},"comment":{"url":"https://api.github.com/repos/containers/libpod/issues/comments/419758724","html_url":"https://github.com/containers/libpod/issues/1119#issuecomment-419758724","issue_url":"https://api.github.com/repos/containers/libpod/issues/1119","id":419758724,"node_id":"MDEyOklzc3VlQ29tbWVudDQxOTc1ODcyNA==","user":{"login":"fbruetting","id":10520767,"node_id":"MDQ6VXNlcjEwNTIwNzY3","avatar_url":"https://avatars2.githubusercontent.com/u/10520767?v=4","gravatar_id":"","url":"https://api.github.com/users/fbruetting","html_url":"https://github.com/fbruetting","followers_url":"https://api.github.com/users/fbruetting/followers","following_url":"https://api.github.com/users/fbruetting/following{/other_user}","gists_url":"https://api.github.com/users/fbruetting/gists{/gist_id}","starred_url":"https://api.github.com/users/fbruetting/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fbruetting/subscriptions","organizations_url":"https://api.github.com/users/fbruetting/orgs","repos_url":"https://api.github.com/users/fbruetting/repos","events_url":"https://api.github.com/users/fbruetting/events{/privacy}","received_events_url":"https://api.github.com/users/fbruetting/received_events","type":"User","site_admin":false},"created_at":"2018-09-10T00:55:14Z","updated_at":"2018-09-10T00:55:14Z","author_association":"NONE","body":"Any progress on this? I just tried out podman and wasted hours on searching for what I did wrong (I just started with containers) before seeing this here. 😒 `docker run -d -p 80:80 nginx` runs fine… Is using `-networking host` a usable workaround or how much unsafe is this really?\r\n\r\nI’m on Fedora 28 Atomic Host, Podman v0.8.3 and containernetworking-plugins-0.7.3-1.\r\n\r\nIs there a corresponding bug report at CNI?"}}
{"actor":{"display_login":"fbruetting"}}