Hello again. I have a container running pihole, but cannot access the mapped ports. They show up as listening on those ports, but no traffic is passed through. Is there some nat rules that are needed beyond the container setup? The docs for container and the example given show mapping ports, but don’t mention any additional nat might be needed:
container {
name pihole {
cap-add net-admin
cap-add net-raw
cap-add net-bind-service
description "pihole dns server"
environment DNS1 {
value 1.1.1.3
}
environment DNS2 {
value 1.0.0.3
}
environment DNSMASQ_LISTENING {
value all
}
environment TZ {
value America/Denver
}
environment WEBPASSWORD {
value xxxxxx
}
image pihole:latest
memory 1024
network NET {
}
port dns_tcp {
destination 53
protocol tcp
source 53
}
port dns_udp {
destination 53
protocol udp
source 53
}
port http {
destination 80
protocol tcp
source 8080
}
restart on-failure
volume dnsmasq.d {
destination /etc/dnsmasq.d
source /config/pihole/dnsmasq.d
}
volume log {
destination /var/log/pihole
source /config/pihole/log
}
volume pihole {
destination /etc/pihole
source /config/pihole/etc
}
}
network NET {
prefix 10.88.0.0/24
}
}
If I change to use host networking, then it all works. So I think the rest of the config is good to go.
If I enter the container with podman exec, then I can curl localhost:80 and get the page I’m expecting.
Telnet to port 8080 from my LAN device works, so I don’t think it’s a firewall issue. LAN to LOCAL is wide open.