Re: iptables -P OUTPUT REJECT gives the error Bad policy name.
On Sat, Aug 10, 2002 at 05:47:55PM +0300, Shaul Karl wrote:
> /tmp# iptables -P OUTPUT REJECT
> iptables: Bad policy name
> Should I anticipate this? My understanding of the man page is that
> REJECT should be a valid target.
> I have no problem to specify REJECT as the target of some rule.
REJECT isn't a built-in target, so it can't be a policy. Use
DROP as your policy and append `iptables -A OUTPUT -j REJECT` as the
last rule of your chain to unconditionally reject packets.