:INPUT,FORWARD,OUTPUT -j REJECT;=;OK -j REJECT --reject-with icmp-net-unreachable;=;OK -j REJECT --reject-with icmp-host-unreachable;=;OK -j REJECT --reject-with icmp-port-unreachable;=;OK -j REJECT --reject-with icmp-proto-unreachable;=;OK -j REJECT --reject-with icmp-net-prohibited;=;OK -j REJECT --reject-with icmp-host-prohibited;=;OK -j REJECT --reject-with icmp-admin-prohibited;=;OK
