iptables -t nat -F
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]# iptables -F
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]# # NAT UDP 500,4500 to NICs address with sport
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]# iptables -t nat -A POSTROUTING -s 192.1.3.0/24 -p udp --sport 4500  -j SNAT --to-source 192.1.2.254:2500-2700
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]# iptables -t nat -A POSTROUTING -s 192.1.3.0/24 -p udp --sport 500  -j SNAT --to-source 192.1.2.254:3500-3700
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]# iptables -t nat -A POSTROUTING -s 192.1.3.0/24 -j SNAT --to-source 192.1.2.254
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]# ipsec whack --trafficstatus
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
SNAT       udp  --  192.1.3.0/24         0.0.0.0/0            udp spt:4500 to:192.1.2.254:2500-2700
SNAT       udp  --  192.1.3.0/24         0.0.0.0/0            udp spt:500 to:192.1.2.254:3500-3700
SNAT       all  --  192.1.3.0/24         0.0.0.0/0            to:192.1.2.254
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]# ../../pluto/bin/ipsec-look.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]# ipsec auto --status
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566825553.384:204806): avc:  denied  { write } for  pid=29431 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=578160065 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-5\[root@nic newoe-25-cat-5]#