From: Christoph Anton Mitterer Signed-off-by: Christoph Anton Mitterer Signed-off-by: Florian Westphal --- doc/statements.txt | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/doc/statements.txt b/doc/statements.txt index 5d197aeb0cee..f380a60aaa71 100644 --- a/doc/statements.txt +++ b/doc/statements.txt @@ -1,3 +1,4 @@ +[[VERDICT_STATEMENTS]] VERDICT STATEMENTS ~~~~~~~~~~~~~~~~~~ The verdict statements alter control flow in the ruleset and issue policy decisions for packets. @@ -201,10 +202,11 @@ ____ *tcp reset* ____ -A reject statement is used to send back an error packet in response to the -matched packet otherwise it is equivalent to drop so it is a terminating -statement, ending rule traversal. This statement is only valid in base chains -using the *prerouting*, *input*, +A reject statement tries to send back an error packet in response to the matched +packet and then interally issues a *drop* verdict. +It’s thus a terminating statement with all consequences of the latter (see +<> respectively <>). +This statement is only valid in base chains using the *prerouting*, *input*, *forward* or *output* hooks, and user-defined chains which are only called from those chains. -- 2.51.0