Shouldn't it be the opposite? If clients receive a REJECT message, they will simply stop trying to connect, but if they don't receive any response at all, i.e., DROP, they will keep on trying to connect before any timeout threshold kicks in, thus putting more load on the server.