nano /etc/config/dockerd
nano /etc/config/dockerd
config firewall 'firewall'
option device 'docker0'
list blocked_interfaces 'wan'
option extra_iptables_args '--match conntrack ! --ctstate RELATED,ESTABLISHED' # allow outbound connections
https://dariusz.wieckiewicz.org/en/monitoring-and-limiting-traffic-in-local-network-router-openwrt/