Reject vs. Drop

It's the most clean solution. If you drop incoming traffic, the external peer will after a timeout try again. When you reject it, the external peer knows that, and won't try again.