how to isolate pod from host

[GBBx]

Hi,
I work with podman 4.9.3. I run pods using quadlet with the default network settings.
I have a process on the host (not in a pod) that listens as something like 192.168.1.1:2222. Is it possible to isolate the pods such that they can't reach this port but they can reach other hosts in my network?

Thanks.

[eriksjolund]

Podman 4.9.3 is a bit old so things might be different there.
Anyway, maybe this is related?
#27482 (comment)

[GBBx]

hi @eriksjolund ,
thanks for the hint.

I found a perhaps ugly but working solution. If I set the CIDR to a conflicting range, the container will not have access to the host but it can connect to other networks, like:

podman run -ti --network slirp4netns:cidr=192.168.1.0/24 myimage sh

telnet 192.168.1.1 443
Host is unreachable

telnet google.com 443
Connected to google.com