Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to reject packets with iptables with ICMP type 3 code 13, communication administratively prohibited.

Does anyone know a method of doing this? There doesn't seem to be an argument to --reject-with that generates these packets.


share|improve this question
up vote 1 down vote accepted

--reject-with icmp-admin-prohibited

Using icmp-admin-prohibited with kernels that do not support it will result in a plain DROP instead of REJECT

share|improve this answer
Unfortunately that triggers a separate type and code, ICMP type 3, code 10. Further research seems to indicate that iptables doesn't support this behavior. – Steve Oct 28 '09 at 15:56
Nevermind...this is the correct answer, thanks Teddy! – Steve Oct 28 '09 at 19:03
@Steve: You can delete comments, you know... – Teddy Oct 29 '09 at 0:41

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.