iptables -t nat -F
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way]# iptables -F
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way]# # NAT road. north will not be nated
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way]# iptables -t nat -A POSTROUTING -s 192.1.3.209/32 -j SNAT --to-source 192.1.2.254
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way]# ipsec whack --trafficstatus
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
SNAT       all  --  192.1.3.209          0.0.0.0/0            to:192.1.2.254
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way]# ../../pluto/bin/ipsec-look.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way]# ipsec auto --status
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566825617.108:206379): avc:  denied  { write } for  pid=20244 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=1013755146 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825617.158:206389): avc:  denied  { write } for  pid=20276 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=1013755146 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@nic newoe-25-cat-3-4-way]#