On May 9, 2005, at 12:56 PM, Christopher Fowler wrote: > I assumed REJECT was the same as if there was nothing listening on > that > port. I'm not sure what default behavior REJECT produces if you do not provide a qualifier. Were you providing a --reject-with tcp-reset for the TCP based connections? I believe REJECT defaults to icmp port unreachable and not a TCP RST for REJECT.