I set DEFAULT_FORWARD_POLICY to ACCEPT as recommended in docker documentation but seems it's not enough, etcd is not accessible from my containers.