/testing/guestbin/swan-prep ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-34-clearport-02[root@west ikev2-34-clearport-02]# ipsec start Redirecting to: namespaces direct start via ipsec pluto ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-34-clearport-02[root@west ikev2-34-clearport-02]# /testing/pluto/bin/wait-until-pluto-started ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-34-clearport-02[root@west ikev2-34-clearport-02]# ipsec auto --add west-east 002 added IKEv2 connection "west-east" ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-34-clearport-02[root@west ikev2-34-clearport-02]# ipsec auto --add pass-222 002 added passthrough connection "pass-222" ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-34-clearport-02[root@west ikev2-34-clearport-02]# echo "initdone" initdone ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-34-clearport-02[root@west ikev2-34-clearport-02]# ipsec auto --up west-east 181 "west-east" #1: initiating IKEv2 connection 181 "west-east" #1: sent IKE_SA_INIT request 182 "west-east" #1: sent IKE_AUTH request {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048} 002 "west-east" #2: IKEv2 mode peer ID is ID_FQDN: '@east' 003 "west-east" #1: authenticated using authby=secret 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: route-host output: Error: Peer netns reference is invalid. 002 "west-east" #2: negotiated connection [192.1.2.45-192.1.2.45:0-65535 0] -> [192.1.2.23-192.1.2.23:0-65535 0] 004 "west-east" #2: IPsec SA established tunnel mode {ESP=>0x67cac202 <0x465499bb xfrm=AES_GCM_16_256-NONE NATOA=none NATD=none DPD=passive} ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-34-clearport-02[root@west ikev2-34-clearport-02]# # poke a hole to port 222, those packets will be allowed cleartext ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-34-clearport-02[root@west ikev2-34-clearport-02]# ipsec auto --route pass-222 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. 002 route-host output: Error: Peer netns reference is invalid. ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-34-clearport-02[root@west ikev2-34-clearport-02]# ip xfrm pol src 192.1.2.23/32 dst 192.1.2.45/32 proto tcp sport 222 dir fwd priority 1687486 ptype main src 192.1.2.23/32 dst 192.1.2.45/32 proto tcp sport 222 dir in priority 1687486 ptype main src 192.1.2.45/32 dst 192.1.2.23/32 proto tcp dport 222 dir out priority 1687486 ptype main src 192.1.2.45/32 dst 192.1.2.23/32 dir out priority 2080702 ptype main tmpl src 192.1.2.45 dst 192.1.2.23 proto esp reqid 16389 mode tunnel src 192.1.2.23/32 dst 192.1.2.45/32 dir fwd priority 2080702 ptype main tmpl src 192.1.2.23 dst 192.1.2.45 proto esp reqid 16389 mode tunnel src 192.1.2.23/32 dst 192.1.2.45/32 dir in priority 2080702 ptype main tmpl src 192.1.2.23 dst 192.1.2.45 proto esp reqid 16389 mode tunnel src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket in priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket in priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket in priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket in priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket in priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket out priority 0 ptype main src 0.0.0.0/0 dst 0.0.0.0/0 socket in priority 0 ptype main ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-34-clearport-02[root@west ikev2-34-clearport-02]# # send packet over the clear exception - should return connection refused ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-34-clearport-02[root@west ikev2-34-clearport-02]# echo 'test' | nc -v -w 5 192.1.2.23 222 Ncat: Version 7.80 ( https://nmap.org/ncat ) Ncat: Connection refused. ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-34-clearport-02[root@west ikev2-34-clearport-02 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 westrun.sh 'echo 'test' | nc -v -w 5 192.1.2.23 222' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 westrun.sh '# counters should be zero' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 westrun.sh 'echo 'test' | nc -v -w 5 192.1.2.23 80' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<>>>>>>>>>cut>>>>>>>>>> done <<<<<<<<<