[Fedora] Re: iptables: drop or reject?

[Bruno Wolff III]

On Thu, Oct 25, 2007 at 14:44:44 -0400,
  Andrew Parker <andrewparker at bigfoot.com> wrote:
> 
> If you reject the packets, the remote hosts knows that your hosts
> exists and is up, but won't know why it can't connect.  The remote
> host knows this very quickly.

The ICMP packet used for the reject can use one of several different codes
to explain why the connection was rejected.