From 49709e2ac6cf778e8732e9b0ca124da556ed6a91 Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Thu, 24 May 2018 17:57:34 +0200 Subject: xtables-compat: remove nft_is_ruleset_compatible Use nft_is_table_compatible instead as only helper to a 'skip' decision. Custom tables, tables that have extra base chains that iptables syntax doesn't allow or rules that have special constructs line nftables set lookups or verdict maps are not listed, but a message is provided to show that such table exists. Signed-off-by: Florian Westphal --- iptables/xtables.c | 6 ------ 1 file changed, 6 deletions(-) (limited to 'iptables/xtables.c') diff --git a/iptables/xtables.c b/iptables/xtables.c index 5410952a..7476c974 100644 --- a/iptables/xtables.c +++ b/iptables/xtables.c @@ -1225,12 +1225,6 @@ int do_commandx(struct nft_handle *h, int argc, char *argv[], char **table, case CMD_LIST: case CMD_LIST|CMD_ZERO: case CMD_LIST|CMD_ZERO_NUM: - ret = nft_is_ruleset_compatible(h); - if (ret) { - printf("ERROR: You're using nft features that cannot be mapped to iptables, please keep using nft.\n"); - exit(EXIT_FAILURE); - } - ret = list_entries(h, p.chain, p.table, p.rulenum, cs.options & OPT_VERBOSE, cs.options & OPT_NUMERIC, -- cgit v1.2.3