iptables -t nat -F kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddos-01\[root@nic ikev2-ddos-01]# iptables -F kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddos-01\[root@nic ikev2-ddos-01]# iptables -t nat -L Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain INPUT (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddos-01\[root@nic ikev2-ddos-01]# iptables -I FORWARD -s 192.1.2.23 -p udp --sport 500 -j DROP kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddos-01\[root@nic ikev2-ddos-01]# echo done done kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddos-01\[root@nic ikev2-ddos-01]# : ==== end ==== kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddos-01\[root@nic ikev2-ddos-01]# ../../pluto/bin/ipsec-look.sh kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddos-01\[root@nic ikev2-ddos-01]# : ==== cut ==== kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddos-01\[root@nic ikev2-ddos-01]# ipsec auto --status whack: Pluto is not running (no "/run/pluto/pluto.ctl") kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddos-01\[root@nic ikev2-ddos-01 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<