Over the weekend I got attacked. I realized the cause of this was because I rebooted my server and the docker IPTables rules overwrote the IPTables-Persistent rules I had. After realizing this was the case I uninstalled docker since I wasn’t using it and while I was making firewall changes I set up ipset to block most foreign countries. I also removed IPTables-Persistent and instead just added the post up to the /etc/network/interfacespost-up ipset restore < /etc/iptables/ipset.save post-up iptables-restore < /etc/iptables/rules.v4

After I found this out I did some research and it’s already known. Here are links on how to make things work. https://docs.docker.com/network/iptables/ https://blog.daknob.net/debian-firewall-docker/ https://groups.google.com/forum/#!topic/docker-dev/4SfOwCOmw-E