cd /etc/default
[sudo] vim docker
DOCKER_OPTS = "--iptables=false"
[sudo] systemctl restart docker
参考:How to fix the Docker and UFW security flawdocker