It seems like with the basic "DROP" iptables rule, an outbound attempt will still wait the duration of its timeout.
For instance, if I block an IP address outbound, then attempt to connect to it via telnet, it will wait until its timeout is hit.
Is it possible to specify that the connection must be immediately rejected and/or closed?
For instance, if I have:
target prot opt source destination DROP tcp -- 0.0.0.0/0 220.127.116.11 tcp dpt:443
And then if I run:
# telnet 18.104.22.168 443 Trying 22.214.171.124...
... it will just hang until it eventually times out the request. Is there any way to get linux to more abruptly fail outbound connections (in situations where you cannot modify the application)?