/testing/guestbin/swan-prep ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-33-clearport-01[root@west ikev2-33-clearport-01]# ipsec start Redirecting to: namespaces direct start via ipsec pluto ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-33-clearport-01[root@west ikev2-33-clearport-01]# /testing/pluto/bin/wait-until-pluto-started ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-33-clearport-01[root@west ikev2-33-clearport-01]# ipsec auto --add west-east 002 added IKEv2 connection "west-east" ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-33-clearport-01[root@west ikev2-33-clearport-01]# ipsec auto --add pass-222 002 added passthrough connection "pass-222" ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-33-clearport-01[root@west ikev2-33-clearport-01]# echo "initdone" initdone ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-33-clearport-01[root@west ikev2-33-clearport-01]# # on-demand packet triggers IKE to unavailable peer and is blocked ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-33-clearport-01[root@west ikev2-33-clearport-01]# ipsec auto --route west-east 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-33-clearport-01[root@west ikev2-33-clearport-01]# # poke a hole to port 222, those packets will be allowed cleartext ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-33-clearport-01[root@west ikev2-33-clearport-01]# ipsec auto --route pass-222 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-33-clearport-01[root@west ikev2-33-clearport-01]# ip xfrm pol src 192.1.2.23/32 dst 192.1.2.45/32 proto tcp sport 222 dir fwd priority 1687486 ptype main src 192.1.2.23/32 dst 192.1.2.45/32 proto tcp sport 222 dir in priority 1687486 ptype main src 192.1.2.45/32 dst 192.1.2.23/32 proto tcp dport 222 dir out priority 1687486 ptype main src 192.1.2.45/32 dst 192.1.2.23/32 dir out priority 2080702 ptype main tmpl src 0.0.0.0 dst 0.0.0.0 proto esp reqid 0 mode transport src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket in priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket in priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket in priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket in priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket in priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket in priority 0 ptype main ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-33-clearport-01[root@west ikev2-33-clearport-01]# # send packet over the clear exception - should return connection refused ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-33-clearport-01[root@west ikev2-33-clearport-01]# echo 'test' | nc -v -w 5 192.1.2.23 222 Ncat: Version 7.80 ( https://nmap.org/ncat ) Ncat: Connection refused. ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-33-clearport-01[root@west ikev2-33-clearport-01 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 westrun.sh 'echo 'test' | nc -v -w 5 192.1.2.23 222' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 westrun.sh '# send packet over the 'tunnel' that's negotiating - shoudl get blocked' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 westrun.sh 'echo 'test' | nc -v -w 5 192.1.2.23 80' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<>>>>>>>>>cut>>>>>>>>>> done <<<<<<<<<