Looks like you added the right rule but in the wrong place. The default chain ends with a REJECT and then you did an iptables -A and appended your new rule after the REJECT so it's never reach... [by TrevorH]
I currently have my OUTPUT chain set to DROP. I'd like to change it to REJECT, so that I have a clue that it's my firewall stopping me from getting somewhere rather than a problem with whatever service I'm attempting to access (immediate reject instead of timing out). However, iptables doesn't seem to care for this.
-A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -j REJECT --reject-with tcp-reset
-A INPUT -j REJECT --reject-with icmp-proto-unreachableYou need to call the logdrop chain instead of REJECT.
Someone on reddit posted a fix for speeding youtube downloads
sudo iptables -A INPUT -s 18.104.22.168/24 -j REJECT
sudo iptables -A INPUT -s 22.214.171.124/16 -j REJECT
I would like to know how to achieve this using firewalld (I have no clue about firewalld OR iptables). I would like to add it to a init script for all users.