From: Quan Tian Date: Wed, 10 Jan 2024 04:30:59 +0000 (+0000) Subject: doc: clarify reject is supported at prerouting stage X-Git-Tag: v1.1.0~132 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=52d1346d41c51abf2f77b81d21cb683a6477e817;p=thirdparty%2Fnftables.git doc: clarify reject is supported at prerouting stage It's supported since kernel commit f53b9b0bdc59 ("netfilter: introduce support for reject at prerouting stage"). Reported-by: Dan Winship Signed-off-by: Quan Tian Signed-off-by: Pablo Neira Ayuso --- diff --git a/doc/statements.txt b/doc/statements.txt index 196728054..ae6442b03 100644 --- a/doc/statements.txt +++ b/doc/statements.txt @@ -180,7 +180,7 @@ ____ A reject statement is used to send back an error packet in response to the matched packet otherwise it is equivalent to drop so it is a terminating statement, ending rule traversal. This statement is only valid in base chains -using the *input*, +using the *prerouting*, *input*, *forward* or *output* hooks, and user-defined chains which are only called from those chains.