looks like I might switch to using firewalld instead - "Just use firewalld. It's way better than UFW and latest docker versions integrate with it, instead of modifying iptables directly."