iptables -t nat -F ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# iptables -F ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# # NAT ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# iptables -t nat -A POSTROUTING --source 192.1.3.0/24 --destination 0.0.0.0/0 -j SNAT --to-source 192.1.2.254 ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# # make sure that we never acidentially let ESP through. ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# # ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# iptables -I FORWARD 1 --proto 50 -j DROP ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# iptables -I FORWARD 2 --destination 192.0.2.0/24 -j DROP ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# iptables -I FORWARD 3 --source 192.0.2.0/24 -j DROP ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# # route ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# iptables -I INPUT 1 --destination 192.0.2.0/24 -j DROP ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# # Display the table, so we know it is correct. ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# iptables -t nat -L -n Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain INPUT (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination SNAT all -- 192.1.3.0/24 0.0.0.0/0 to:192.1.2.254 ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# iptables -L -n Chain INPUT (policy ACCEPT) target prot opt source destination DROP all -- 0.0.0.0/0 192.0.2.0/24 Chain FORWARD (policy ACCEPT) target prot opt source destination DROP esp -- 0.0.0.0/0 0.0.0.0/0 DROP all -- 0.0.0.0/0 192.0.2.0/24 DROP all -- 192.0.2.0/24 0.0.0.0/0 Chain OUTPUT (policy ACCEPT) target prot opt source destination ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# echo "initdone" initdone ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# : ==== end ==== ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-25-rw-nat[root@nic ikev2-25-rw-nat]# >>>>>>>>>>cut>>>>>>>>>> done <<<<<<<<<