I have iptables to reject attempted connections to certain ports. NMAP sees these as filtered. I thought reject was to give the appearance that they are closed. How does NMAP know that it is being filtered. Maybe DROP is a better rule?