Port reachable though not enabled in firewall

[ashledombos]

Hello,

I’m not sure to understand how Yunohost firewall works exactly.

I’ve installed (by hand, not application) portainer, and surprisingly I can access it on port 9000

admin@fuu:~$ sudo yunohost firewall list
opened_ports:
  - 22
  - 25
  - 53
  - 80
  - 443
  - 587
  - 993
  - 995
  - 5222
  - 5269
  - 5353
admin@fuu:~$ nc -zv 192.168.1.204 9000
Connection to 192.168.1.204 9000 port [tcp/*] succeeded!
admin@fuu:~$ ss -tunlp |grep :9000
tcp    LISTEN     2      128      :::9000                 :::*

Any idea why 9000 port is reachable?

[ashledombos]

Ok it’s Docker who is messing with iptables, I have to add an option so it doesn’t add rules.

https://fralef.me/docker-and-iptables.html