First of all, sorry about my English lul
I have a pretty simple infrastructure running under docker:
container1: iptables firewall;
container2: https repository;
container3: ansible server.
container1 has two interfaces so it can goes out trought WAN via eth0 and communicate with containers 2 and 3 via eth1 (LAN).
The problem im facing is to make LAN able to reach the internet (ping -c3 google.com).
container1 - I've already set ipv4_forwarding and made WAN's GW my default route (it communicates with the other two containers and reaches the internet).
container3 - they communicate normally on LAN but just can't ping FW's IP addr so don't reach the WAN... I've set a static route spreading FW's WAN subnet and now they can ping 184.108.40.206 (docker's bridged interface which is used as FW subnet GW, FW IP: 220.127.116.11).
Am I missing any iptables conf (didn't make nothing yet) or do I need to configure a route out of the docker (between interfaces docker0-docker1 on host machine)?
Can send container routing tables if you need it, maybe there's something missing.
Hope some buddy could give me a hand ")