On Friday 01 January 2010 14:38:36 Etaoin Shrdlu wrote:
> On Friday 01 January 2010, Alexander wrote:
> > On Friday 01 January 2010 03:07:42 Etaoin Shrdlu wrote:
> > > On Thursday 31 December 2009, Alexander wrote:
> > > > Is there a way to redirect TCP connections from external network
> > > > interfaces to the local/loopback in network 127.0.0.0/8? I need
> > > > functionality like DNAT target in iptables.
> > >
> > > Uh...why don't you use DNAT then?
> >
> > This doesn't work, because kernel drops any packets that come from
> > external network to 127.0.0.0/8.
>
> Of course it does. But in these cases, the workaround is assigning a
> non-127 address to the lo interface, like 192.168.0.1/32 for example, and
> DNAT to that address (and have whatever program should receive the data
> listen on 192.168.0.1, of course).

This way eats some private network address range and this could be cause of a
collisions with an external private networks. Reconfiguring services for a new ip
ranges isn't so easy procedure in general (let's consider device that should
work just out of the box with a trivial configutation efforts). Thus it's
important use some subsets of 127.0.0.0/8 network for that.

I have just been advised to look at net-misc/stone or net-proxy/haproxy (thanks
to has been adviced), but I'm not sure that this will work like DNAT.