> “Throw” routes may be used for implementing policy-based routing. In non-default tables they stop the lookup process but don’t send ICMP error messages.
No - "throw" continues to the next "ip rule" entry that matches, i.e. throws the lookup to the next table. It's like "continue" in C-like languages.
> “Throw” routes may be used for implementing policy-based routing. In non-default tables they stop the lookup process but don’t send ICMP error messages.
No - "throw" continues to the next "ip rule" entry that matches, i.e. throws the lookup to the next table. It's like "continue" in C-like languages.
Very poorly named.
iproute? nft all the way!
I thought the NFT hype was over...
It is about iproute2, so not directly related to iptables/nftables.
You confused iproute2 and iptables.
what? man