sudo iptables -I DOCKER ! -s ipyouwanttoallow -j DROP sudo iptables -I DOCKER -s localipofyourcontainer -d 0.0.0.0/0 -j ACCEPT sudo iptables -I DOCKER -m state --state ESTABLISHED,RELATED -j ACCEPT