/testing/guestbin/swan-prep kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# cp policies/* /etc/ipsec.d/policies/ kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# echo "192.1.2.0/24" >> /etc/ipsec.d/policies/private-or-clear kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# ipsec start Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Redirecting to: /etc/init.d/ipsec start Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Starting pluto IKE daemon for IPsec: kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# /testing/pluto/bin/wait-until-pluto-started kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# # give OE policies time to load kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# sleep 5 kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# ipsec auto --add passthrough-in 002 added connection description "passthrough-in" kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# ipsec auto --route passthrough-in kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# ipsec auto --add passthrough-out 002 added connection description "passthrough-out" kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# ipsec auto --route passthrough-out kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# # ensure for tests acquires expire before our failureshunt=2m kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# echo 30 > /proc/sys/net/core/xfrm_acq_expires kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# echo "initdone" initdone kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# ping -n -c 2 -I 192.1.3.209 192.1.2.23 PING 192.1.2.23 (192.1.2.23) from 192.1.3.209 : 56(84) bytes of data. 64 bytes from 192.1.2.23: icmp_seq=2 ttl=64 time=0.264 ms --- 192.1.2.23 ping statistics --- 2 packets transmitted, 1 received, 50% packet loss, time 25ms rtt min/avg/max/mdev = 0.264/0.264/0.264/0.000 ms kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# # wait on OE retransmits and rekeying kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# sleep 5 kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# # ping should succeed through tunnel kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# ping -n -c 1 -I 192.1.3.209 192.1.2.23 PING 192.1.2.23 (192.1.2.23) from 192.1.3.209 : 56(84) bytes of data. 64 bytes from 192.1.2.23: icmp_seq=1 ttl=64 time=0.089 ms --- 192.1.2.23 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.089/0.089/0.089/0.000 ms kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# sleep 5 kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# ipsec whack --trafficstatus whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec whack --trafficstatus' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh '# echo should go through passthrough, not increase traffic counter of tunnel' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh 'echo "PLAINTEXT" | nc -s 192.1.3.209 192.1.2.23 22' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec whack --trafficstatus' <<<<<<<<< [192.1.2.23-192.1.2.23:0-65535 0] kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# : ==== cut ==== kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass]# ipsec auto --status whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) kroot@swantest:/home/build/libreswan/testing/pluto/newoe-15-portpass\[root@road newoe-15-portpass 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<