Am 17.07.2012 19:08, schrieb Alvin Wong:
> [Forgot to reply all, resend]
> 
> No route to host means your IP cannot reach the remote IP, not port
> related.

that is not really true

iptables -A INPUT -p tcp -m multiport --destination-port 25 -j REJECT 
--reject-with icmp-host-unreachable

i still brought up http://www.linuxtopia.org/Linux_Firewall_iptables/x4550.html
and yes, i use it regulary to block complete machines in cases where
they do even not need to know the other side exists

________________

you can even respond like a router with "network unreachable" and
use all this things even for outgoing rules, emember that iptables
is the base of many routers/firewalls

iptables -A INPUT -p tcp -m multiport --destination-port 25 -j REJECT 
--reject-with icmp-net-unreachable

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to