iproute is required for blocking via null routes; without it, rules based on routes.conf will fail. Closes #15638