github.com/containernetworking/plugins contains firewall misconfigurations. The misconfiguration causes the HostPort/portmap
rule to take precedence on matching incoming traffic even if there are earlier rules or better fitting rules in the iptables nat
chains.