From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?iso-8859-1?Q?Johan_Fredrik_=D8hman?= Subject: REJECT in PREROUTING Date: Wed, 26 Feb 2003 23:18:19 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <000001c2dde4$f79479a0$f767f081@shuttle> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01C2DDED.5958E1A0" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0001_01C2DDED.5958E1A0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Sorry if this question has been asked before, but: =20 Is there any good reasons, technically or political, to disallow the = REJECT target in the PREROUTING table? =20 Thanks =20 JF=D8 ------=_NextPart_000_0001_01C2DDED.5958E1A0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Sorry if this question has been asked before, = but:

Is there any good reasons, technically or political, = to disallow the REJECT target in the PREROUTING table?

Thanks

JF=D8

------=_NextPart_000_0001_01C2DDED.5958E1A0-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Maciej Soltysiak Subject: Re: REJECT in PREROUTING Date: Mon, 3 Mar 2003 10:16:27 +0100 (CET) Sender: netfilter-admin@lists.netfilter.org Message-ID: References: <000001c2dde4$f79479a0$f767f081@shuttle> Mime-Version: 1.0 Return-path: In-Reply-To: <000001c2dde4$f79479a0$f767f081@shuttle> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: TEXT/PLAIN; charset="us-ascii" Content-Transfer-Encoding: 7bit To: =?iso-8859-1?Q?Johan_Fredrik_=D8hman?= Cc: netfilter@lists.netfilter.org > Sorry if this question has been asked before, but: > > > Is there any good reasons, technically or political, to disallow the REJECT > target in the PREROUTING table? The PREROUTING chain is in nat and mangle tables. REJECT is supposed to be used in filter table; Do filtering only there. Nat is supposed to be used for address translation, and mangle for just mangling. That's the short answer. This question indeed has been asked on the list, please look it up for a more detailed answer if you wish. Regards, Maciej Soltysiak