Show HN: Network-filter – domains-based whitelist for Docker containers(github.com)

3 pointsby txprogvor 11 Monaten0 comments

Show HN: Network-filter – domains-based whitelist for Docker containers

https://github.com/Monadical-SAS/network-filter

Built this because LLM tools with MCP servers (OpenCode, Goose, Claude code, etc.) have too much network access. It uses network_mode: 'service:x' to force containers through iptables rules that drop everything except whitelisted domains. No proxy - operates at the network namespace level so bypasses aren't possible.

0 comments

—