Hi, Am Montag, 20. Aug 2007, 17:52:02 +0200 schrieb Pascal Hambourg: > Ruben Laban a écrit : >> On Monday 20 August 2007, Bertram Scharpf wrote: >>> on one of my machines the REJECT target doesn't behave as I >>> expect. It is inserted into a chain but it is not accepted >>> as a policy. > > It behaves as expected. REJECT is an extension, not a built-in target, and > cannot be used as a policy. Check man iptables. I wrote "as _I_ expect". Obviously I expected wrong. Now, I found it in the manpage. On an other list I was told it were a good idea to set REJECT as policy. I'm so glad that I asked here. Thank you. Bertram -- Bertram Scharpf Stuttgart, Deutschland/Germany http://www.bertram-scharpf.de