Re: redirect/dnat to localhost address in prerouting chain?

Ian Pilcher <[email protected]> wrote:
> In order to make this work, I currently have both stunnel and Apache
> listening on the IPv4 wildcard address, which I don't like.  There's no
> reason that stunnel or Apache (on that port) should ever receive traffic
> directly from another host.

You can check if connection requests are subject to dnat (redirect) via
'ct status dnat'.  This is the recommended solution to prevent 'direct
connect'.