Hi all Just something I would like to pick someones brain with. If I use the default policy of drop, BUT at the end of the chain use the following $IPT -t filter -A FORWARD -j REJECT --reject-with icmp-host-unreachable Would that be ok, or does is another ICMP message I can reply back with. Reason I ask this is because I find that by using the default policy (DROP), some applications keep retrying to make a connection etc. Where as this approach, seems to slow things down (I stand to correction on this). If someone could maybe help me understand this or assit I would be most grateful. Kind Regards Brent Clark
