-p tcp -j REJECT --reject-with tcp-reset

-p udp -j REJECT --reject-with icmp-port-unreachable

The purpose of these is to make a client that tries to connect to these ports realize immediately that the server isn't running, and report the error to the user, rather than keep retrying until it times out. RST is a flag sent by a machine when there's no server process listening on a particular TCP port, and ICMP Port Unreachable is the analogous response for UDP ports.

Not the answer you're looking for? Browse other questions tagged or ask your own question.