minor fixes in the ikev2/rw-mark-in-out scenarios

testing/tests/ikev2/rw-mark-in-out/hosts/sun/etc/ipsec.conf

@@ -4,7 +4,7 @@ config setup
 	crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
-	charondebug="knl 2, chd 3"
+	charondebug="knl 2"
 
 conn %default
 	ikelifetime=60m

testing/tests/ikev2/rw-mark-in-out/posttest.dat

@@ -7,5 +7,5 @@ venus::/etc/init.d/iptables stop 2> /dev/null
 sun::/etc/init.d/iptables stop 2> /dev/null
 sun::ip route del 10.1.0.0/16 via PH_IP_MOON
 sun::conntrack -F
-moon::iptables -t -nat -F
+moon::iptables -t nat -F
 moon::conntrack -F