blob: 7057b2689ed1a264150a9463713e3b544f2b8ad0 (plain
- The REJECT target has an '--reject-with admin-prohib' option which used
with kernels that do not support it, will result in a plain DROP instead
of REJECT. Use with caution.
Kernels that do support it:
- There are some issues related to upgrading from 1.2.x to 1.3.x on a system
with dynamic ruleset changes during runtime. (Please see
After upgrading from 1.2 to 1.3, it suggest go do an iptables-save, then
iptables-restore to ensure your dynamic rule changes continue to work.