system

type IptablesAnalysis struct {
	HasDocker          bool     // Docker chains detected
	DockerChains       []string // List of Docker chains found
	DockerUserRules    []string // Rules in DOCKER-USER chain
	UFWActive          bool     // Is UFW running
	DockerBypassingUFW bool     // Is Docker bypassing UFW
	RequiresSudo       bool     // Did we need sudo to read iptables
	ErrorMessage       string   // Error if analysis failed
}

type IptablesRule struct {
	Chain  string // e.g., "DOCKER", "DOCKER-USER", "INPUT"
	Rule   string // The full rule text
	Action string // e.g., "ACCEPT", "DROP", "REJECT"
}