Re: Connect to localhost bound port from outside?

[Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>]

Pascal Hambourg wrote:
> Iptables will happily redirect anything you like to localhost, but the 
> kernel IP routing prohibits communications with a loopback address on a 
> non loopback interface and thus will drop the packets. This is similar 
> to the problem in the above thread "port forwarding through localhost", 
> and the same workaround is applicable.

Does this apply if the reverse path filter is turned off?  Or is this a 
hard coded filter in the kernel that can not be gotten around?

Another thought to the OP would be to use the Dummy interface in lieu of 
the Loop Back interface as I believe it does not have the same 
restrictions that Loop Back does.  However I could be mistaken.

I have often considered using lo for local only but using dummy as a 
spur network to bind services to and then route traffic in to the spur 
network.  Thoughts / Opinions?



Grant. . . .