[stormbeard]

How is this better than configuring an iptables redirection?

[zamadatix]

iptables only provides one of the two approaches detailed, namely the "ack" portion. For the "fake a random real service on each port" portion you'd need something additional like this.