The RPDB is scanned in order of decreasing priority. The selector
of each rule is applied to {source address, destination address, incoming
interface, tos, fwmark} and, if the selector matches the packet,
-the action is performed. The action predicate may return with success.
+the action is performed. The action predicate may return with success.
In this case, it will either give a route or failure indication
and the RPDB lookup is terminated. Otherwise, the RPDB program
continues with the next rule.
(ID 253).
The
.B default
-table is empty. It is reserved for some post-processing if no previous
+table is empty. It is reserved for some post-processing if no previous
default rules selected the packet.
This rule may also be deleted.
.P
Each RPDB entry has additional
-attributes. F.e. each rule has a pointer to some routing
-table. NAT and masquerading rules have an attribute to select new IP
-address to translate/masquerade. Besides that, rules have some
+attributes. F.e. each rule has a pointer to some routing
+table. NAT and masquerading rules have an attribute to select new IP
+address to translate/masquerade. Besides that, rules have some
optional attributes, which routes have, namely
.BR "realms" .
-These values do not override those contained in the routing tables. They
+These values do not override those contained in the routing tables. They
are only used if the route did not select any attributes.
.sp
.RS
.TP
.BI type " TYPE " (default)
-the type of this rule. The list of valid types was given in the previous
+the type of this rule. The list of valid types was given in the previous
subsection.
.TP
.TP
.BI iif " NAME"
-select the incoming device to match. If the interface is loopback,
-the rule only matches packets originating from this host. This means
+select the incoming device to match. If the interface is loopback,
+the rule only matches packets originating from this host. This means
that you may create separate routing tables for forwarded and local
packets and, hence, completely segregate them.
.TP
.BI oif " NAME"
-select the outgoing device to match. The outgoing interface is only
+select the outgoing device to match. The outgoing interface is only
available for packets originating from local sockets that are bound to
a device.
.TP
.BI priority " PREFERENCE"
-the priority of this rule. Each rule should have an explicitly
+the priority of this rule. Each rule should have an explicitly
set
.I unique
priority value.
.TP
.BI realms " FROM/TO"
Realms to select if the rule matched and the routing table lookup
-succeeded. Realm
+succeeded. Realm
.I TO
is only used if the route did not select any realm.
.B Warning:
Changes to the RPDB made with these commands do not become active
-immediately. It is assumed that after a script finishes a batch of
+immediately. It is assumed that after a script finishes a batch of
updates, it flushes the routing cache with
.BR "ip route flush cache" .
.RE