Show HN: Network-filter – domains-based whitelist for Docker containers(github.com)
github.com
Show HN: Network-filter – domains-based whitelist for Docker containers
https://github.com/Monadical-SAS/network-filter
Built this because LLM tools with MCP servers (OpenCode, Goose, Claude code, etc.) have too much network access. It uses network_mode: 'service:x' to force containers through iptables rules that drop everything except whitelisted domains. No proxy - operates at the network namespace level so bypasses aren't possible.
0 comments
—