>> at the very least, all the reject routes that get installed could be
>> changed to dump traffic out a nul interface instead, which might make
>> visual inspection of the routing table easier.
>But would have different semantics.  Traffic that hits a reject route
>generates an ICMP unreachable, as I recall; traffic routed out a nul
>interface wouldn't.

	i'm not really objecting, but anyway i'd like to comment.

	actually, there's RTF_BLACKHOLE so you don't really need nul0 for the
	behavior.
	RTF_BLACKHOLE - no icmp
	RTF_REJECT - with icmp

itojun