Hack the Route Start free Open app Firewalls
Drop or reject
Two ways to refuse a packet: silence, or an explicit answer.
Drop gives silence: clients wait for a timeout and scanners report filtered. Reject answers at once (a TCP reset or ICMP unreachable): friendlier to real users, and for TCP it can look like a closed port. The sender of an ICMP error reveals where the block is.