This is BROKEN!

Posted Dec 26, 2014 9:28 UTC (Fri) by cesarb (subscriber, #6266)
In reply to: This is BROKEN! by Cyberax
Parent article: Fedora 21 and its Workstation firewall

You can also use iptables to proxy from a low port to a high port.

(It exposes a huge kernel written in C to the network, but it's already exposed anyway, so...)

This is BROKEN!

Posted Dec 26, 2014 18:37 UTC (Fri) by Cyberax (✭ supporter ✭, #52523) [Link] (1 responses)

Except it does not work with localhost, as far as I remember.

This is BROKEN!

Posted Dec 26, 2014 21:37 UTC (Fri) by foom (subscriber, #14868) [Link]

Works fine if you set up the iptables rules correctly. Local packets don't go through PREROUTING/POSTROUTING, so you also should add a rule on the OUTPUT nat table for packets destined for interface lo.