diff options
| author | Quan Tian <tianquan23@gmail.com> | 2024-01-10 04:30:59 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2024-01-10 17:11:22 +0100 |
| commit | 52d1346d41c51abf2f77b81d21cb683a6477e817 (patch) | |
| tree | 6e4ee577be17371388b0ca074b22d33aa68fdebd /doc/statements.txt | |
| parent | 9caa5142f95557decc19925ad37411f1df4589a2 (diff) | |
doc: clarify reject is supported at prerouting stage
It's supported since kernel commit f53b9b0bdc59 ("netfilter: introduce
support for reject at prerouting stage").
Reported-by: Dan Winship <danwinship@redhat.com>
Signed-off-by: Quan Tian <tianquan23@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'doc/statements.txt')
| -rw-r--r-- | doc/statements.txt | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/statements.txt b/doc/statements.txt index 19672805..ae6442b0 100644 --- a/doc/statements.txt +++ b/doc/statements.txt @@ -180,7 +180,7 @@ ____ A reject statement is used to send back an error packet in response to the matched packet otherwise it is equivalent to drop so it is a terminating statement, ending rule traversal. This statement is only valid in base chains -using the *input*, +using the *prerouting*, *input*, *forward* or *output* hooks, and user-defined chains which are only called from those chains. |