iptables -t nat -F
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# iptables -F
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# # NAT
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# iptables -t nat -A POSTROUTING --source 192.1.3.0/24 --destination 0.0.0.0/0 -j SNAT --to-source 192.1.2.254
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# # make sure that we never acidentially let ESP through.
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# #
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# iptables -I FORWARD 1 --proto 50 -j DROP
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# iptables -I FORWARD 2 --destination 192.0.2.0/24 -j DROP
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# iptables -I FORWARD 3 --source 192.0.2.0/24 -j DROP
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# # route
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# iptables -I INPUT 1 --destination 192.0.2.0/24 -j DROP
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# # Display the table, so we know it is correct.
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
SNAT       all  --  192.1.3.0/24         0.0.0.0/0            to:192.1.2.254
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
DROP       all  --  0.0.0.0/0            192.0.2.0/24        

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
DROP       esp  --  0.0.0.0/0            0.0.0.0/0           
DROP       all  --  0.0.0.0/0            192.0.2.0/24        
DROP       all  --  192.0.2.0/24         0.0.0.0/0           

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# echo "initdone"
initdone
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# : ==== end ====
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# : ==== cut ====
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# : ==== tuc ====
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# ../bin/check-for-core.sh
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-48-nat-cp[root@nic ikev2-48-nat-cp 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<<tuc<<<<<<<<<<>>>>>>>>>>cut>>>>>>>>>> done <<<<<<<<<<tuc<<<<<<<<<<