Downgrade the failure to change the iptables settings from fatal to an error.

Even though we are checking for a working iptables installation, it is still
possible that the user does not have the PHYSDEV matcher installed, so just
issue a diagnostic instead.

Signed-off-by: Ewan Mellor <ewan@xensource.com>

diff --git a/tools/examples/vif-common.sh b/tools/examples/vif-common.sh
index 9a0640b701d24d8241d9804b61c5668291e23511..f19a9790ff6a81e2393a5c92c73dbca876597236 100644 (file)
--- a/tools/examples/vif-common.sh
+++ b/tools/examples/vif-common.sh
@@ -63,7 +63,9 @@ function frob_iptable()
   fi
 
   iptables "$c" FORWARD -m physdev --physdev-in "$vif" "$@" -j ACCEPT ||
-    fatal "iptables $c FORWARD -m physdev --physdev-in $vif $@ -j ACCEPT failed"
+    log err \
+     "iptables $c FORWARD -m physdev --physdev-in $vif $@ -j ACCEPT failed.
+If you are using iptables, this may affect networking for guest domains."
 }