so use "-p 127.0.0.1:5432:5432"
- https://github.com/docker-library/postgres/issues/770
- https://sysdig.com/blog/zoom-into-kinsing-kdevtmpfsi
- https://sysdig.com/blog/cloud-defense-in-depth/
- https://thenewstack.io/kinsing-malware-targets-kubernetes/
- https://stackoverflow.com/search?q=kinsing
- https://github.com/search?q=repo%3Adocker-library%2Fpostgres...
-----------
https://docs.docker.com/network/packet-filtering-firewalls/
"On Linux, Docker manipulates iptables rules to provide network isolation. While this is an implementation detail and you should not modify the rules Docker inserts into your iptables policies, it does have some implications on what you need to do if you want to have your own policies in addition to those managed by Docker.
If you're running Docker on a host that is exposed to the Internet, you will probably want to have iptables policies in place that prevent unauthorized access to containers or other services running on your host. This page describes how to achieve that, and what caveats you need to be aware of."