>>>>>>>>>>cut>>>>>>>>>> nicinit.sh <<<<<<<<<<tuc<<<<<<<<<<iptables -t nat -F
[root@nic xauth-pluto-13]# iptables -F
[root@nic xauth-pluto-13]# # NAT
[root@nic xauth-pluto-13]# iptables -t nat -A POSTROUTING --source 192.1.3.0/24 --destination 0.0.0.0/0 -j SNAT --to-source 192.1.2.254
[root@nic xauth-pluto-13]# # make sure that we never acidentially let ESP through.
[root@nic xauth-pluto-13]# iptables -N LOGDROP
[root@nic xauth-pluto-13]# iptables -A LOGDROP -j LOG
[root@nic xauth-pluto-13]# iptables -A LOGDROP -j DROP
[root@nic xauth-pluto-13]# #
[root@nic xauth-pluto-13]# iptables -I FORWARD 1 --proto 50 -j LOGDROP
[root@nic xauth-pluto-13]# iptables -I FORWARD 2 --destination 192.0.2.0/24 -j LOGDROP
[root@nic xauth-pluto-13]# iptables -I FORWARD 3 --source 192.0.2.0/24 -j LOGDROP
[root@nic xauth-pluto-13]# # route
[root@nic xauth-pluto-13]# iptables -I INPUT 1 --destination 192.0.2.0/24 -j LOGDROP
[root@nic xauth-pluto-13]# # Display the table, so we know it is correct.
[root@nic xauth-pluto-13]# iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
SNAT       all  --  192.1.3.0/24         0.0.0.0/0            to:192.1.2.254
[root@nic xauth-pluto-13]# iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
LOGDROP    all  --  0.0.0.0/0            192.0.2.0/24        

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
LOGDROP    esp  --  0.0.0.0/0            0.0.0.0/0           
LOGDROP    all  --  0.0.0.0/0            192.0.2.0/24        
LOGDROP    all  --  192.0.2.0/24         0.0.0.0/0           

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain LOGDROP (4 references)
target     prot opt source               destination         
LOG        all  --  0.0.0.0/0            0.0.0.0/0            LOG flags 0 level 4
DROP       all  --  0.0.0.0/0            0.0.0.0/0           
[root@nic xauth-pluto-13]# echo initdone
initdone
[root@nic xauth-pluto-13]# : ==== end ====
[root@nic xauth-pluto-13]# >>>>>>>>>>cut>>>>>>>>>> final.sh <<<<<<<<<<tuc<<<<<<<<<<../../pluto/bin/ipsec-look.sh
[root@nic xauth-pluto-13]# : ==== cut ====
[root@nic xauth-pluto-13]# ipsec auto --status
-bash: ipsec: command not found
[root@nic xauth-pluto-13 127]# : ==== tuc ====
[root@nic xauth-pluto-13]# ../bin/check-for-core.sh
[root@nic xauth-pluto-13]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1568896544.312:61): avc:  denied  { remount } for  pid=478 comm="(networkd)" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=filesystem permissive=1
type=AVC msg=audit(1568896544.314:62): avc:  denied  { remount } for  pid=478 comm="(networkd)" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=filesystem permissive=1
[root@nic xauth-pluto-13]# : ==== end ====
[root@nic xauth-pluto-13]# >>>>>>>>>>cut>>>>>>>>>> done <<<<<<<<<<tuc<<<<<<<<<<