From 52d1346d41c51abf2f77b81d21cb683a6477e817 Mon Sep 17 00:00:00 2001 From: Quan Tian Date: Wed, 10 Jan 2024 04:30:59 +0000 Subject: doc: clarify reject is supported at prerouting stage It's supported since kernel commit f53b9b0bdc59 ("netfilter: introduce support for reject at prerouting stage"). Reported-by: Dan Winship Signed-off-by: Quan Tian Signed-off-by: Pablo Neira Ayuso --- doc/statements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'doc/statements.txt') diff --git a/doc/statements.txt b/doc/statements.txt index 19672805..ae6442b0 100644 --- a/doc/statements.txt +++ b/doc/statements.txt @@ -180,7 +180,7 @@ ____ A reject statement is used to send back an error packet in response to the matched packet otherwise it is equivalent to drop so it is a terminating statement, ending rule traversal. This statement is only valid in base chains -using the *input*, +using the *prerouting*, *input*, *forward* or *output* hooks, and user-defined chains which are only called from those chains. -- cgit v1.2.3