Responses

• action = block | "pass"

• block = "block" [ret-icmp [returncode] | "return-rst" ]

• ret-icp = "return-icmp" | "return-icmp-as-dest"

• return-code = "("icmp-code")"

• default return-code is configurable and defaults to 13 (administratively prohibited)

• return-rst is only allowed with TCP

• return packets are not filtered themselves (they follow the fastroute path as explained later)

Notes: