Make collaborator use less-privileged user

[putsi]

trafficstars

Even though the instance is assumed to be a burner, make it use something less-privileged than the root-user.

[Merenon]

This requires the use of high-ports and related iptables rules.

The only way I found is by using something like:

iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 50080

Is there any other effective way?

[putsi]

There are some other ways such as using authbind and CAP_NET_BIND_SERVICE (https://superuser.com/questions/710253/allow-non-root-process-to-bind-to-port-80-and-443) but I'm not sure if these are better in any way.