>So, this is new behaviour in KAME? If these routes are required, why >does the network stack allow them to be deleted at all? And why is the >network stack adding routes like this in the first place, when it can >be done just as well by user-level code? I guess you are right. thanks. we need to protect them from deletion. itojun