4 ms·
Bubkes. A middlebox can transparently rewrite incoming packets' port numbers from 22 to 2200, and backwards.
by mmirate 8y ago
Bubkes. A middlebox can transparently rewrite incoming packets' port numbers from 22 to 2200, and backwards.
- 0x0 8y agoAbsolutely. But in a classic UNIX network, middleboxes aren't a part of the threat model. Unprivileged UNIX user accounts binding on TCP ports were and are. So, ports below 1024 were reserved for the root account and that was a decent protection at the time against enterprising users trying to race system daemons in binding listening sockets. See for example https://www.w3.org/Daemon/User/Installation/PrivilegedPorts.html https://www.w3.org/Daemon/User/Installation/PrivilegedPorts.... And even today, it still protects against an exploit kit running as "www-data" or "nobody" springboarded from a wordpress exploit.