On Sun, 2004-01-04 at 21:04, Technical wrote: > -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited that's where. you have to look at it as a chain of rules. If a packet hasn't been dealt with by the rules above this one, then it will be rejected.