From Fedora --- ipchains-1.3.10/ipchains.8 +++ ipchains-1.3.10/ipchains.8 @@ -70,7 +70,8 @@ .I DENY and .I REJECT -are the same for ICMP packets.) +are the same for ICMP packets). [Note: this is incorrect; setting ICMP to +REJECT will cause ICMP port unreachables to be sent!] .sp 0.5 .I MASQ is only legal for the forward and user defined chains, and can only be