Hello,
Ruben Laban a écrit :
On Monday 20 August 2007, Bertram Scharpf wrote:
on one of my machines the REJECT target doesn't behave as I
expect. It is inserted into a chain but it is not accepted
as a policy.
It behaves as expected. REJECT is an extension, not a built-in target,
and cannot be used as a policy. Check man iptables.
The REJECT target is only valid when either the tcp or udp module is loaded.
AFAIK, REJECT is not dependant on tcp or udp and can be used with any
protocol. Only the "--reject-with tcp-reset" option can be used only
with tcp.