title: Leverage iptables to drop packets between docker containers
body: <p>I have three containers C1, C2 and C3, forming a cluster, and a DNS instance running. The containers resolve their IPs using the DNS and already can communicate with each other as they expose the needed ports using vanilla docker configuration. </p>
  
  <p>How can I leverage <code>iptables</code> from the host to drop packets between say C1 and C2 at any point in time?</p>