iptables -t nat -F
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1]# iptables -F
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1]# # NAT to NIC's address
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1]# iptables -t nat -A POSTROUTING -s 192.1.3.0/24 -j SNAT --to-source 192.1.2.254
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1]# ipsec whack --trafficstatus
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
SNAT       all  --  192.1.3.0/24         0.0.0.0/0            to:192.1.2.254
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1]# ../../pluto/bin/ipsec-look.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1]# ipsec auto --status
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566825527.833:204064): avc:  denied  { write } for  pid=16463 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=578489871 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825528.477:204084): avc:  denied  { write } for  pid=17089 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=1013371129 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-1\[root@nic newoe-25-cat-1]#