Docker port forwarding uses iptables which can override your firewall rules, specify a host ip to limit access.