instruction: Create a Dockerfile for fundamentals
output: ```dockerfile
  from the DOCKER chains. For example, iptables -D DOCKER ! -i docker0 -o docker0 -j DROP.Fix a security issue that was allowing remote hosts to connect directly to a container on its published ports. moby/moby#49325Fix a security issue that was allowing neighbor hosts to connect to ports mapped on a loopback address. moby/moby#49325Fix an issue that prevented port publishing to link-local addresses. moby/moby#48570UDP ports published by a container are now reliably accessible by containers on other networks, via the host's public IP address. moby/moby#48571Docker will now only set the ip6tables policy for the FORWARD chain in the filter table to DROP if it enables IP forwarding on the host itself (sysctls net.ipv6.conf.all.forwarding and net.ipv6.conf.default.forwarding). This is now aligned with existing IPv4 behaviour. moby/moby#48594If IPv6 forwarding is enabled on your host, but you were depending on Docker to set the ip6tables filter-FORWARD policy to DROP, you may need to update your host's configuration to make sure it is secure.Direct routed access to container ports that are not exposed using p/-publish is now blocked in the DOCKER iptables chain. moby/moby#48724If the default iptables filter-FORWARD policy was previously left at ACCEPT on your host, and direct routed access to a container's unpublished ports
  ```