Nick8Premium
join:2001-03-17
UK | reply to paul1238
Re: Free IPTABLES SCRIPT! Get it here now!!! I don't think you can set a policy of reject.. The reject target is an optional module.
Even if you could, I dislike the way in which a plain reject rule (no --reject-with) sends back an dest. unreachable regardless of what it is rejecting.. I prefer to have it send RST ACKs / ICMP 3,3s when dropping TCP / UDP..
Since reject has to be a rule, I thought it would aid clarity to ignore policies altogether..
Thanks for the comments. |
