First page Back Continue Last page Summary Graphic
IPCHAINS Rules (cont'd)
REJECT
- Rejecting a packet means the same as dropping it (see DENY), but it is more "polite." An ICMP message is sent to the sender indicating that the packet was dropped. (Note: DENY and REJECT are the same for ICMP packets.)
MASQ
- This target is only legal for the forward and user defined chains and can only be used if the kernel is compiled with CONFIG_IP_MASQUERADE defined. With this, packets will be masqueraded as if they originated from the local host.