Hacker News Reader

iptables rule redirects all closed ports on the machine to the one portspoof listens to: https://github.com/drk1wi/portspoof/blob/c3f3c34531c59df229e...

Then it calls getsockopt to find out what the original port was: https://github.com/drk1wi/portspoof/blob/c3f3c34531c59df229e...

That's actually pretty darn neat. Thanks for the references, too.

nat-redirection

Yea, that statement confused me as well.

why? A single process can bind to multiple ports. I don't know what's the hard limit actually, or how much memory it would use. Probably a port redirect would just be simpler.

But this thing says it binds to ONE port. iptables is doing the port redirect for unbound ports.