On Fri, 16 Feb 2007, Tzahi Fadida wrote:

Is there an added value in contrast of just using a simple
server that accepts on low ports but bounces the packets
to a low privileged port?

The easy way to do this was discussed before, it's called port forwarding. It's done at the firewall level. See REDIRECT target in iptables manual. Implementing a mini-daemon or control script that runs under sudo to turn the feature on or off is trivial.

E.g.: http://www.faqs.org/docs/iptables/targets.html

iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT \
--to-ports 8080

Which allows you to run e.g. Apache as nonprivileged user on port 8080.

Peter

=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to