配置说明由firewalld管理docker iptables规则。回到顶部firewalld查看活动区# firewall-cmd --get-active-zonespublic interfaces: ens33配置规则firewall-cmd --permanent --delete-zonedocker firewall-cmd --permanent --zonepublic --add-masquerade # 添加在 active zone firewall-cmd --reload回到顶部docker 配置cat /etc/docker/daemon.json EOF { iptables: false } EOF回到顶部重启 dockersystemctl restart docker