To view parent comment, click here.
To read all comments associated with this story, please click here.
Have you ever heard of iptables? You can redirect ports with iptables agnostic of the service. (from memory), something similar to this might work:
/sbin/iptables -t nat -A PREROUTING -i eth0 -p udp --dport 53 -j REDIRECT --to-port 153
That would redirect udp port 53 (DNS) to port 153.
"DNS doesn't specify anything about ports, only ip address and host names."
Yes it does, but... only with SRV type requests. These requests ask the IP address and the associated port for a given service. For instance, "tell me the SIP proxy address and its port for the given domain".
However, and it is where you are right, this type of request is not used to access web servers, where it is just a classical name resolution, and not a "service resolution".






Member since:
2005-11-11
Well with freedom comes responsibility, right? I'm a firm believer in having the freedom to make mistakes in life. Yes if someone who has never worked with Apache exposed on the public Internet sets this up, they are likely an easy target for hackers. Ths guide makes no warning of this and in that regard it is a total and complete failure and should be removed from howtoforge.com
Also the article is incorrect in saying that you can update DNS to forward traffic to a different port. DNS doesn't specify anything about ports, only ip address and host names.