News for hackers. Stuff that matters.

A comment on Abusing Linux's firewall: the hack that allowed us to build Spectrum. Parent comment

Re:Abusing Linux's firewall: the hack that allowed us to bui... by c22 on Thursday April 12, 2018 @02:21PM (#16823542)
I have a vpn for myself and some friends that accepts connections on all ports. I set it up over a decade ago on OpenBSD with a simple pf redirect. I have never had any problems with it, but it obviously doesn't see nearly as much traffic as Cloudflare.

Does OpenBSD handle this differently than Linux, or am I doing this wrong?

[ Parent | on HN ]
Re:Abusing Linux's firewall: the hack that allowed us to bui... by ryan-c on Thursday April 12, 2018 @02:40PM (#16823699)
The trick is that they want the application to be able to see what the original destination IP and port were. I'm not sure if a pf redirect preserves that information.
[ Parent | on HN ]
Re:Abusing Linux's firewall: the hack that allowed us to bui... by jlgaddis on Thursday April 12, 2018 @03:47PM (#16824286)
It does -- or appears to, at least, for my instances of (OpenBSD's) spamd.
[ Parent | on HN ]