Docker breaking Wireguard external connectivity

Hi,

many thanks for your message. I found this old entry on our board https://dietpi.com/forum/t/docker-installation-break-wireguard-connection/3332/1

It looks similar to what you described.

Basically following should fix it during run. Unfortunately it doesn’t seems to be be boot persistent or it get’s overwritten by docker all the time?

iptables --policy FORWARD ACCEPT

EDIT1:
Found this on docker docs https://docs.docker.com/network/iptables/#docker-on-a-router

not sure what is best way to add the ACCEPT rule to the DOCKER-USER chain. But following was working on my test

iptables -I DOCKER-USER -i eth0 -o wg0 -j ACCEPT
apt install iptables-persistent
reboot

Maybe there is a better option. Need to say, I’m not a Docker specialist.