#!/bin/sh kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02]# kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02]# # NAT North's IP to ours kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02]# iptables -t nat -F POSTROUTING kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02]# iptables -t nat -A POSTROUTING --source 192.1.3.0/24 --destination 0.0.0.0/0 -p udp -j SNAT --to-source 192.1.2.254:11000-12000 kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02]# kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02]# # Display the table, so we know it is correct. kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02]# iptables -t nat -L Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain INPUT (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination SNAT udp -- 192.1.3.0/24 anywhere to:192.1.2.254:11000-12000 kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02]# kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02]# echo done. done. kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02]# : ==== end ==== kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02]# ../../pluto/bin/ipsec-look.sh | sed "s/dport [0-9][0-9][0-9][0-9][0-9]/dport DPORT/" kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02]# : ==== cut ==== kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02]# ipsec auto --status whack: Pluto is not running (no "/run/pluto/pluto.ctl") kroot@swantest:/home/build/libreswan/testing/pluto/pluto-rekey-02\[root@nic pluto-rekey-02 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<