[SOLVED] --reject-with icmp-port-unreachable question

battles · 01-26-2015, 06:18 PM

I am currently blocking port 80:
iptables -A INPUT -p tcp --destination-port 80 -j DROP

What I was wondering, if I use the REJECT below, is a message displayed in the browser of the REJECTed? Is there any way to send back a personally scripted message?

iptables -A INPUT -p TCP --dport 80 -j REJECT --reject-with icmp-port-unreachable tcp-reset

Thanks

linosaurusroot · 01-27-2015, 04:03 AM

If you want to create the message you've got to send TCP data to their browser giving the HTTP code 403 or whatever.

Packet level actions won't do that but will leave their browser showing its own version of "connection failed" or just a blank screen or whatever the browser programmer decided on.