From the netfilter FAQ: The answer unfortunately is: No. Now you might think ‘but what about libiptc?’. As has been pointed out numerous times on the mailinglist(s), libiptc was NEVER meant to be used as a public interface. We don’t guarantee a stable interface, and it is planned to remove it in the next incarnation … Read more
Thanks for the help everyone! Turns out that it was an iptable conflict. Two rules listing the port open (which resulted in a closed port). However, one of the comments by aka and another by manu2013 were problems that I would have run into, if not for the conflict. So! Always remember to edit the … Read more
Problem This problem has been around for a long time. Disable iptables in Docker will take other problems. Rollback changes first If you have modified your server according to the current solution that we find on the internet, please rollback these changes first, including: Enable Docker’s iptables feature. Remove all changes like –iptables=false , including … Read more
Okay, thanks to the people who pointed out the capabilities system and CAP_NET_BIND_SERVICE capability. If you have a recent kernel, it is indeed possible to use this to start a service as non-root but bind low ports. The short answer is that you do: setcap ‘cap_net_bind_service=+ep’ /path/to/program And then anytime program is executed thereafter it … Read more