nat64: T9536: Fix check for only one source rule

The verify step was meant to allow only one NAT64 netfilter instance, but
it looked for a "mode" node that does not exist in the CLI, so it never
matched. A second source rule was accepted and Jool created a second
netfilter instance without error, although the Jool documentation states
that only one is allowed per network namespace. Which instance translates
traffic is then undefined.

Every rule is created with the netfilter framework, so verify now counts
all configured source rules and rejects the commit when there is more than
one. A dead check that tried to recreate an instance on a "mode" change is
removed for the same reason.

0 files changed, 0 insertions, 0 deletions