as that's used as general term for rejected or dropped packets
in the rest of the config.

Motivation for this change

I was very irritated when I checked the journal of a NixOS server, as the inevitable port scans were logged as connection rejected, implying an ICMP port unreachable was sent as an answer and despite dropping was the default action.

Things done

• Tested using sandboxing (nix.useSandbox on NixOS, or option build-use-sandbox in nix.conf on non-NixOS)
• Built on platform(s)
  • NixOS
  • macOS
  • other Linux distributions
• Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
• Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
• Tested execution of all binary files (usually in ./result/bin/)
• Fits CONTRIBUTING.md.