On 01/06/2016 07:56 AM, Shital Sakhare wrote: > Yes, now I am dropping packets in OUTPUT chain for type 3. That's what it sounded like, but I didn't want to assume that because it's absolutely insane. If you don't want to send ICMP traffic, then drop incoming traffic that you don't want instead of rejecting it.