I often see that people set STEAL target in iptables rules. It's possible to get this target by installing (on debian) xtables-addons-common and xtables-addons-dkms. I was curious why people prefer STEAL over DROP, so I checked the manual, but there's only the following info:   STEAL       Like the DROP target, but does not throw an error like DROP when used       in the OUTPUT chain.Does anyone know what error? For example, we could take the two following rules:-A OUTPUT --protocol tcp --match multiport ! --dports 80,443 --match set --match-set bt_level1 dst --jump STEALand:-A OUTPUT --protocol tcp --match multiport ! --dports 80,443 --match set --match-set bt_level1 dst --jump DROP What is the difference between them?
What is the difference between -j DROP and -j STEAL?
iptables