From d44564fab8e361d8fb6f5d18f494df45a65f9780 Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Mon, 14 Apr 2003 00:47:47 +0000
Subject: [PATCH] Improve REJECT processing

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@537 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall/firewall | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/Shorewall/firewall b/Shorewall/firewall
index de2e55df0..5f637c654 100755
--- a/Shorewall/firewall
+++ b/Shorewall/firewall
@@ -3302,8 +3302,12 @@ add_common_rules() {
     #
     # Reject Rules
     #
-    run_iptables -A reject -p tcp -j REJECT --reject-with tcp-reset
-    run_iptables -A reject -j REJECT
+    run_iptables -A reject -p tcp  -j REJECT --reject-with tcp-reset
+    run_iptables -A reject -p udp  -j REJECT
+    qt iptables  -A reject -p icmp -j REJECT --reject-with icmp-host-unreachable
+    qt iptables  -A reject         -j REJECT --reject-with icmp-host-prohibited
+    run_iptables -A reject         -j REJECT
+
     #
     # dropunclean rules
     #