iptables -t nat -F
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# iptables -F
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# # NAT
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# iptables -t nat -A POSTROUTING -s 192.1.3.0/24 -p udp --sport 4500 -j SNAT --to-source 192.1.2.254:3500-3700
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# iptables -t nat -A POSTROUTING -s 192.1.3.0/24 -p udp --sport 500 -j SNAT --to-source 192.1.2.254:2500-2700
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# iptables -t nat -A POSTROUTING --source 192.1.3.0/24 --destination 0.0.0.0/0 -j SNAT --to-source 192.1.2.254
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# iptables -I FORWARD 1 --proto 50 -j DROP
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# echo done
done
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# ../../pluto/bin/ipsec-look.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# ipsec auto --status
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566824781.750:169760): avc:  denied  { write } for  pid=5361 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=942309374 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825159.201:187491): avc:  denied  { write } for  pid=23097 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=269723122 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-32-nat-rw-rekey\[root@nic ikev2-32-nat-rw-rekey]#