From 3b569df215e4050e5188fc51d99a12bf3126e148 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Wed, 10 Jul 2013 17:07:56 +0200 Subject: [PATCH] conntrack -F makes ikev2/nat-rw scenario to work always --- testing/tests/ikev2/nat-rw/pretest.dat | 1 + 1 file changed, 1 insertion(+) diff --git a/testing/tests/ikev2/nat-rw/pretest.dat b/testing/tests/ikev2/nat-rw/pretest.dat index d701a1d61..f58e82adc 100644 --- a/testing/tests/ikev2/nat-rw/pretest.dat +++ b/testing/tests/ikev2/nat-rw/pretest.dat @@ -1,6 +1,7 @@ alice::iptables-restore < /etc/iptables.rules venus::iptables-restore < /etc/iptables.rules sun::iptables-restore < /etc/iptables.rules +moon::conntrack -F moon::iptables -t nat -A POSTROUTING -o eth0 -s 10.1.0.0/16 -p udp -j SNAT --to-source PH_IP_MOON:1024-1100 moon::iptables -t nat -A POSTROUTING -o eth0 -s 10.1.0.0/16 -p tcp -j SNAT --to-source PH_IP_MOON:2000-2100 alice::ipsec start