From: Jan Engelhardt Date: Sun, 15 Mar 2009 20:22:49 +0000 (+0100) Subject: iptables: turn deprecation warning into enforcing mode X-Git-Tag: v1.4.3~11 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e0390bee;p=thirdparty%2Fiptables.git iptables: turn deprecation warning into enforcing mode The deprecation warning was added 7 months ago in v1.4.2-rc1-13-g1eada72 with a warning "next release". Next release is coming up, so enforce it. Signed-off-by: Jan Engelhardt --- diff --git a/iptables.c b/iptables.c index bd177c73..4c171669 100644 --- a/iptables.c +++ b/iptables.c @@ -1819,10 +1819,9 @@ int do_command(int argc, char *argv[], char **table, struct iptc_handle **handle if (strcmp(*table, "nat") == 0 && ((policy != NULL && strcmp(policy, "DROP") == 0) || (jumpto != NULL && strcmp(jumpto, "DROP") == 0))) - fprintf(stderr, "\nThe \"nat\" table is not intended for " - "filtering, hence the use of DROP is deprecated and " - "will permanently be disabled in the next iptables " - "release. Please adjust your scripts.\n\n"); + xtables_error(PARAMETER_PROBLEM, + "\nThe \"nat\" table is not intended for filtering, " + "the use of DROP is therefore inhibited.\n\n"); for (matchp = matches; matchp; matchp = matchp->next) if (matchp->match->final_check != NULL)