The Docker engine calls iptables internally: https://github.com/docker/libnetwork/blob/2c921b/iptables/iptables.go#L400 Signed-off-by: Christian Stewart <christian@paral.in> [Thomas: fix indentation.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>