iptables -t nat -F ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp-two-servers[root@nic ikev2-48-nat-cp-two-servers]# iptables -F ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp-two-servers[root@nic ikev2-48-nat-cp-two-servers]# iptables -t nat -L Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain INPUT (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp-two-servers[root@nic ikev2-48-nat-cp-two-servers]# # NAT ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp-two-servers[root@nic ikev2-48-nat-cp-two-servers]# iptables -t nat -A POSTROUTING -s 192.1.3.0/24 -p udp --sport 4500 -j SNAT --to-source 192.1.2.254:3500-3700 ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp-two-servers[root@nic ikev2-48-nat-cp-two-servers]# iptables -t nat -A POSTROUTING -s 192.1.3.0/24 -p udp --sport 500 -j SNAT --to-source 192.1.2.254:2500-2700 ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp-two-servers[root@nic ikev2-48-nat-cp-two-servers]# iptables -t nat -A POSTROUTING --source 192.1.3.0/24 --destination 0.0.0.0/0 -j SNAT --to-source 192.1.2.254 ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp-two-servers[root@nic ikev2-48-nat-cp-two-servers]# echo done done ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp-two-servers[root@nic ikev2-48-nat-cp-two-servers]# : ==== end ==== ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp-two-servers[root@nic ikev2-48-nat-cp-two-servers]# ipsec trafficstatus whack: Pluto is not running (no "/run/pluto/pluto.ctl") ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp-two-servers[root@nic ikev2-48-nat-cp-two-servers 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec trafficstatus' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<>>>>>>>>>cut>>>>>>>>>> done <<<<<<<<<