iptables: turn deprecation warning into enforcing mode

The deprecation warning was added 7 months ago in v1.4.2-rc1-13-g1eada72
with a warning "next release". Next release is coming up, so enforce it.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>

diff --git a/iptables.c b/iptables.c
index bd177c73eca337443fc940db5cbb5a48eea115f1..4c17166940e4a7c6cfed5fc0b98b0d8f4a3402eb 100644 (file)
--- a/iptables.c
+++ b/iptables.c
@@ -1819,10 +1819,9 @@ int do_command(int argc, char *argv[], char **table, struct iptc_handle **handle
        if (strcmp(*table, "nat") == 0 &&
            ((policy != NULL && strcmp(policy, "DROP") == 0) ||
            (jumpto != NULL && strcmp(jumpto, "DROP") == 0)))
-               fprintf(stderr, "\nThe \"nat\" table is not intended for "
-                       "filtering, hence the use of DROP is deprecated and "
-                       "will permanently be disabled in the next iptables "
-                       "release. Please adjust your scripts.\n\n");
+               xtables_error(PARAMETER_PROBLEM,
+                       "\nThe \"nat\" table is not intended for filtering, "
+                       "the use of DROP is therefore inhibited.\n\n");
 
        for (matchp = matches; matchp; matchp = matchp->next)
                if (matchp->match->final_check != NULL)