:INPUT,FORWARD,OUTPUT -j REJECT;=;OK # manpage for IPv6 variant of REJECT does not show up for some reason? -j REJECT --reject-with icmp6-no-route;=;OK -j REJECT --reject-with icmp6-adm-prohibited;=;OK -j REJECT --reject-with icmp6-addr-unreachable;=;OK -j REJECT --reject-with icmp6-port-unreachable;=;OK -j REJECT --reject-with icmp6-policy-fail;=;OK -j REJECT --reject-with icmp6-reject-route;=;OK -p tcp -j REJECT --reject-with tcp-reset;=;OK -j REJECT --reject-with tcp-reset;;FAIL