[bananadonkey]

Docker does add iptables rules by default, which bypass other rules such as those you might set with ufw.

https://github.com/chaifeng/ufw-docker has a good overview and ufw-specific solution (I use it on my rpi).