title: iptables DROP does not silently drop the packets
body: <p>I have two servers, one acting as a standby and the other as active. From the standby pgpool constantly checking whether postgres is working on the other server. I am trying to simulate a situation where the pgpool's request to the active server times out, and trying to use iptables DROP for that.</p>
  <p>According to what I have read, the DROP option silently drops packets without the source getting to know it and, it takes a long time to fail (for the source to know). I used the below entry in the iptables of the active server:</p>
  <pre><code>iptables -A INPUT -p tcp -s &lt;standby server ip&gt; \
           -m state --state NEW,ESTABLISHED --dport 5432 -j DROP
  </code></pre>
  <p>By doing this, I could simulate a timeout but it times out too soon (not even a second).</p>
  <p>Can anyone explain what does it mean by &quot;take a long time to fail&quot; in all the references? and whether there's any option that I can use to increase the time taken to fail.</p>