Re: iptables -P OUTPUT REJECT gives the error Bad policy name.

[Simon Law <sfllaw@engmail.uwaterloo.ca>]

On Sat, Aug 10, 2002 at 05:47:55PM +0300, Shaul Karl wrote:
> /tmp# iptables -P OUTPUT REJECT
> iptables: Bad policy name
> 
> Should I anticipate this? My understanding of the man page is that 
> REJECT should be a valid target.
> 
> I have no problem to specify REJECT as the target of some rule. 

	REJECT isn't a built-in target, so it can't be a policy.  Use
DROP as your policy and append `iptables -A OUTPUT -j REJECT` as the
last rule of your chain to unconditionally reject packets.

Simon