How to make iptables(NAT) not to send RST back
I have some questions about using iptables to make a NAT.
Now my policy is
iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
iptables -A FORWARD -i eth1 -o eth0 -m state --state RELATED,ESTABLISH -j ACCEPT
iptables -A FORWARD -i eth0 -o eth1 -j ACCEPT
Where eth0 is my internal network and eth1 is external network.
And with this, once my NAT has got unsolicited TCP-SYN, it will reply back with TCP-RST.
Is it possible to make it just drop this SYN without response the RST back ?
Thx in advance