April 9, 20233 yr I recently went the route of adding several VLANs to segment my docker containers into DMZ areas. In the process I noticed that you have to have an IP address set in the network settings for the network (VLAN) to be available to Docker. I guess that makes sense, as that is how they learn a default gateway. However, that poses a security risk in my mind. If one of those containers gets compromised, it can access the unRAID server which now has an IP on that network. Is there anyway I can disable the GUI and SSH access from a specific interface? Because it is on the same network segment, a router firewall rule is useless.
September 10, 2025Sep 10 any news here??i also would like to disable access to unraid from vlans just from tagged native lan only... any idea how to?
September 10, 2025Sep 10 I have bridging disabled and vlans enabled on eth0 interface.My unraid doesn't listen on eth0.20.You have to go to network settings/ interface extra and exclude the interfaces on which you don't want your server to listen.
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.