How do I restrict cAdvisor to the internal network?

Hello,
I installed cAdvisor on a web server, but I want only one specific IP address to be able to connect to port 8080. For this, I used the following iptables:

`-A FILTERS -m state --state NEW -s 172.20.2.1/16 -m tcp -p tcp --dport 8080 -j ACCEPT`

But it doesn't work. Why?

Thank you.