i was just summarizing the behavior of iptables and i'm puzzled by a contardiction between the man page and oskar's tutorial. regarding possible chain policies, oskar lists DROP, ACCEPT and REJECT. the man page, however, suggests all of ACCEPT, DROP, QUEUE or RETURN, which seems a bit odd. since i've only used DROP or ACCEPT until now, i'm not sure what the right answer is. anyone? rday