From: Quan Tian Date: Wed, 10 Jan 2024 04:30:59 +0000 (+0000) Subject: doc: clarify reject is supported at prerouting stage X-Git-Tag: v1.0.6.1~261 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=0751037f6a8d02694ea7fc6569481ee81b8b664d;p=thirdparty%2Fnftables.git doc: clarify reject is supported at prerouting stage commit 52d1346d41c51abf2f77b81d21cb683a6477e817 upstream. It's supported since kernel commit f53b9b0bdc59 ("netfilter: introduce support for reject at prerouting stage"). Reported-by: Dan Winship Signed-off-by: Quan Tian Signed-off-by: Pablo Neira Ayuso --- diff --git a/doc/statements.txt b/doc/statements.txt index 0532b2b1..014b2e2e 100644 --- a/doc/statements.txt +++ b/doc/statements.txt @@ -180,7 +180,7 @@ ____ A reject statement is used to send back an error packet in response to the matched packet otherwise it is equivalent to drop so it is a terminating statement, ending rule traversal. This statement is only valid in base chains -using the *input*, +using the *prerouting*, *input*, *forward* or *output* hooks, and user-defined chains which are only called from those chains.