Re: [PATCH] doc: document danger of applying REJECT to INVALID CTs

[Maciej Żenczykowski]

Also maybe the example should be:

instead of just:
-A INPUT ... -j REJECT
do:
-A INPUT ... -m conntrack --ctstate INVALID -j DROP
-A INPUT ... -j REJECT