> “Throw” routes may be used for implementing policy-based routing. In non-default tables they stop the lookup process but don’t send ICMP error messages.
No - "throw" continues to the next "ip rule" entry that matches, i.e. throws the lookup to the next table. It's like "continue" in C-like languages.
Very poorly named.
sam_lowry_Jul 25, 2026, 6:33 PM
iproute? nft all the way!
isailovicJul 25, 2026, 6:38 PM
It is about iproute2, so not directly related to iptables/nftables.
No - "throw" continues to the next "ip rule" entry that matches, i.e. throws the lookup to the next table. It's like "continue" in C-like languages.
Very poorly named.