Description

Some iptables rules are created in the container's network namespace to make moby's internal DNS resolver accessible from containers (without binding to well known ports in the container's netns, in case the container runs its own resolver).

Translate those rules to use nftables.