Questions Regarding the Use of UFW-DOCKER

[TechBrain64]

1. Does UFW-DOCKER (UFWD) require installation/enablement of UFW?
2. If UFW was previously installed and rules configured, should existing rule be deleted prior to configuring UFWD?
3. How does one configure a specific IP address allow rule? (Suggestion: should be added to default helper output text).
4. After installing and best effort configuring UFWD, host no longer reporting to CrowdSec Console. Remediations?
5. What is the purpose of targeting a container as opposed to host?
6. Here is the output of "ufw-docker check": If my configuration correct?

[chaifeng]

1. Yes, ufw-docker is not a replacement of UFW. It's just a wrapper script to make UFW work correctly with Docker's network
2. Usually no. You don't need to delete existing rules. However, it depends on what those rules are.
3. Currently, the feature is NOT implemented. There is an open PR feat: add source support #139 for this feture. But we haven't merge it yet because it might cause compatibility issues with existing users.
4. It seems like the rules added by ufw-docker block CrowdSec's traffic. Please check your firewall logs to see if there any related traffic dropped.
5. They are different chains in the firewall. Host rules go into the INPUT chain, container rules go into the FORWARD chain
6. Yes and no. It looks like you use the --docker-subnets option in your previous installation to specify or auto-detect Docker networks. The newest version defaults to adding all private network ranges, no --docker-subnets used