Update README.md

Author: Springjunky

README.md

@@ -36,11 +36,12 @@ Now you are ready to go with a little CI/CD Environment:
 #### Security
 ... not really, its all http .. don't worry about it! It's only local communication
 
-WARNING
-All the services are reachable from outer world because docker creates and deletes dynamically FORWARD Rules with ACCEPT on startup / shutdown containers with exported ports.
+##### security paranoia
+All the exposed ports are reachable from outer world because docker creates and deletes dynamically FORWARD rules with default policy ACCEPT on startup / shutdown containers witch have exported ports.
 
-To deny acccess froum outer world the DOCKER-USER Chain (since docker 17.06) ist the medium of choice.
-A little Script to deny all access from outer world to your local build environment could be
+To deny acccess from outer world the DOCKER-USER Chain (since docker 17.06) ist the medium of choice for your own rules (this is the first target in the FORWARD-Chain and never touched by docker).
+
+A little Script to deny all access from outer world to your local build environment could be the following (exposed port from nginx are 80,5555,2222)
 ```
 #!/bin/bash
 if [ $# -lt 1 ] ; then