From e0390bee2aa51dd76725c1a9e0d2cb53379767b8 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Sun, 15 Mar 2009 21:22:49 +0100 Subject: iptables: turn deprecation warning into enforcing mode The deprecation warning was added 7 months ago in v1.4.2-rc1-13-g1eada72 with a warning "next release". Next release is coming up, so enforce it. Signed-off-by: Jan Engelhardt --- iptables.c | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/iptables.c b/iptables.c index bd177c73..4c171669 100644 --- a/iptables.c +++ b/iptables.c @@ -1819,10 +1819,9 @@ int do_command(int argc, char *argv[], char **table, struct iptc_handle **handle if (strcmp(*table, "nat") == 0 && ((policy != NULL && strcmp(policy, "DROP") == 0) || (jumpto != NULL && strcmp(jumpto, "DROP") == 0))) - fprintf(stderr, "\nThe \"nat\" table is not intended for " - "filtering, hence the use of DROP is deprecated and " - "will permanently be disabled in the next iptables " - "release. Please adjust your scripts.\n\n"); + xtables_error(PARAMETER_PROBLEM, + "\nThe \"nat\" table is not intended for filtering, " + "the use of DROP is therefore inhibited.\n\n"); for (matchp = matches; matchp; matchp = matchp->next) if (matchp->match->final_check != NULL) -- cgit v1.2.3