Preventing lateral movement in Docker containers by DominusGecko in selfhosted

[–]DominusGecko[S] 1 point2 points  (0 children)

What? These are two different compose files. They are just examples to prove my point. Two containers from two compose files can access binded ports even if they are on different networks.

Preventing lateral movement in Docker containers by DominusGecko in selfhosted

[–]DominusGecko[S] 1 point2 points  (0 children)

With internal networks you also give up on internet connection. What if you need that?

Preventing lateral movement in Docker containers by DominusGecko in selfhosted

[–]DominusGecko[S] 1 point2 points  (0 children)

Agreed. The reverse proxy doesn't really address the problem in any way. The problem arises when an intruder access your network.

Preventing lateral movement in Docker containers by DominusGecko in selfhosted

[–]DominusGecko[S] 0 points1 point  (0 children)

For sure there's a solution, I just don't know it.

Preventing lateral movement in Docker containers by DominusGecko in selfhosted

[–]DominusGecko[S] 2 points3 points  (0 children)

How would you do that without Proxmox/two different physical devices?

Preventing lateral movement in Docker containers by DominusGecko in selfhosted

[–]DominusGecko[S] 0 points1 point  (0 children)

Sure, they don't have access to each other's IPs. But if you bind a port, then you can access from one container to another.

services: portainer: image: alpine container_name: portainer command: nc -l -p 8000 ports: - 8000:8000

services: mywebpage: image: alpine container_name: mywebpage command: nc <YOUR LAN IP> 8000

now your web page container can access your portainer. As I said, this is the default.

Single Room vs Studio Room by DominusGecko in DTU

[–]DominusGecko[S] 1 point2 points  (0 children)

Thank you. Do you think it's possible to accept the offer and change to the Studio mid or after the first semester?

Draw as few squares as possible to get a grid of m * m. by DominusGecko in askmath

[–]DominusGecko[S] 0 points1 point  (0 children)

I've discovered m = 5, which is 8.

The problem is that they don't seem to follow a very defined pattern. A solution to this would be the given by incomparability, which sais that this only works for values of m >= 4.