dockder起得openwrt无法访问它的80端口

swh-telpo · 发表于 2024-7-31 11:04

大佬们，我的设备是debian11的arm架构,我在docker里面的openwrt已经能够访问外网，也监听了80端口的web服务，但是用其他主机能够ping通openwrt的ip，但是没办法访问它的80端口。下面是一些配置截图
主机的：
ifconfig eth0
eth0: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST>  mtu 1500
      inet 192.168.0.225  netmask 255.255.255.0  broadcast 192.168.0.255
      inet6 fe80::1aa9:2bee:3b48:93e1  prefixlen 64  scopeid 0x20<link>
      ether 7e:cb:c8:0e:fe:c5  txqueuelen 1000  (Ethernet)
      RX packets 11249007  bytes 2533249480 (2.3 GiB)
      RX errors 0  dropped 134064  overruns 0  frame 0
      TX packets 583537  bytes 59184081 (56.4 MiB)
      TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
      device interrupt 80
docker里面的openwrt容器：
root@k8s-node-1:~# docker exec -it openwrt bash
bash-5.1# ifconfig
eth0    Link encap:Ethernet  HWaddr 02:42:C0:A8:00:01
      inet addr:192.168.0.220  Bcast:192.168.0.255  Mask:255.255.255.0
      inet6 addr: fe80::42:c0ff:fea8:1/64 Scope

ink
      UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
      RX packets:244708 errors:0 dropped:1364 overruns:0 frame:0
      TX packets:255 errors:0 dropped:0 overruns:0 carrier:0
      collisions:0 txqueuelen:0
      RX bytes:51660518 (49.2 MiB)  TX bytes:21149 (20.6 KiB)

lo       Link encap

ocal Loopback
      inet addr:127.0.0.1  Mask:255.0.0.0
      inet6 addr: ::1/128 Scope:Host
      UP LOOPBACK RUNNING  MTU:65536  Metric:1
      RX packets:46 errors:0 dropped:0 overruns:0 frame:0
      TX packets:46 errors:0 dropped:0 overruns:0 carrier:0
      collisions:0 txqueuelen:1000
      RX bytes:16983 (16.5 KiB)  TX bytes:16983 (16.5 KiB)

bash-5.1# ping www.baidu.com
PING www.baidu.com (183.240.98.161): 56 data bytes
64 bytes from 183.240.98.161: seq=0 ttl=50 time=9.476 ms
64 bytes from 183.240.98.161: seq=1 ttl=50 time=9.614 ms
^C
--- www.baidu.com ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 9.476/9.545/9.614 ms
bash-5.1# curl 192.168.0.220
Could not open /dev/crypto: Resource busy
<!DOCTYPE html>
<html lang="en">
<head>
      <meta charset="utf-8">
      <title>
      ImmortalWrt - LuCI
      </title>
      <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" name="viewport" />
      <meta name="format-detection" content="telephone=no, email=no" />
      <meta name="apple-mobile-web-app-capable" content="yes">
希望大佬能帮助一下，我是感觉像防火墙的问题，但是不知道怎么解决

jjit · 发表于 2024-7-31 11:04

命令行进op，运行 /etc/init.d/firewall stop 停了防火墙试试

swh-telpo · 发表于 2024-7-31 11:30

jjit 发表于 2024-7-31 11:22
命令行进op，运行 /etc/init.d/firewall stop 停了防火墙试试

感谢大佬，真的可以。
/etc/init.d/firewall stop
Warning: Section @defaults[0] requires unavailable target extension FLOWOFFLOAD, disabling
Warning: Section @zone[1] (wan) cannot resolve device of network 'wan'
Warning: Section @zone[1] (wan) cannot resolve device of network 'wan6'
Warning: Section @defaults[0] requires unavailable target extension FLOWOFFLOAD, disabling
Warning: Section @zone[1] (wan) has no device, network, subnet or extra options
* Flushing IPv4 filter table
* Flushing IPv4 nat table
* Flushing IPv4 mangle table
然后可以访问了，但是这些报错不知道有没有影响

mn4888 · 发表于 2024-7-31 13:03

你是wan口访问docker吗？听说防火墙里有个转发选项设置成允许就行了

swh-telpo · 发表于 2024-7-31 14:11

mn4888 发表于 2024-7-31 13:03
你是wan口访问docker吗？听说防火墙里有个转发选项设置成允许就行了

应该是lan口，用的都是局域网的主机去访问的，我是根据上面的直接把firewall关闭了

swh-telpo · 发表于 2024-8-7 17:34

jjit 发表于 2024-7-31 11:04
命令行进op，运行 /etc/init.d/firewall stop 停了防火墙试试

大佬可是这样就不能进行端口转发了，而且有时候我关了之后还要继续关闭，不然访问不了web服务

账号		自动登录	找回密码
密码			立即注册

[openwrt(x86)] dockder起得openwrt无法访问它的80端口

最佳答案

相关帖子

点评

点评

欢迎大家光临恩山无线论坛 /2