This is a followup to https://unix.stackexchange.com/a/400203/21615 .
:<chain> <policy> [<packets_count>:<bytes_count>] seems to flush the chain if
DOCKER-USER but does not flush if
Why is that?
Both chains exist when running
INPUT has a default policy, but
DOCKER-USER does not. The last rule of
DOCKER-USER is to
RETURN to the