Docker Bypasses UFW: Why Your Closed Port Is Still Open (and the Fix)
I deleted the UFW rule for a port and it still answered from the internet. Docker publishes ports before UFW sees the packets. How to check from outside and how to bind the port to localhost.
