How to Block Docker Ports with nftables Without Getting Bypassed

You add an nftables rule to drop traffic on port 8080. You check the ruleset — it's active. You curl...