I use the iptables reject trick all the time. It's particularly useful when you have a bunch of servers in a DNS round robin. When one of them adds the reject

I use the iptables reject trick all the time. It's particularly useful when you have a bunch of servers in a DNS round robin. When one of them adds the reject rule, clients start failing over to the next server in the DNS round robin essentially immediately.