On Fri, Oct 17, 2014 at 02:24:36PM +0200, Alvaro Neira Ayuso wrote: > If you add the rule: > nft add rule inet filter input reject with icmpx type host-unreachable > nft list table inet filter > > shows: > table inet filter { > chain input { > reject with icmpx type 2 > } > } Applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html