I think podman rootless behaves much better than docker regarding firewall "bypassing"