/testing/guestbin/swan-prep --46 --nokey
Creating empty NSS database
west #
 # expect no holes; not ipsec-kernel-policy.sh as that filters
west #
 ipsec _kernel policy
west #
 ipsec pluto --config /etc/ipsec.conf --leak-detective
west #
 ../../guestbin/wait-until-pluto-started
west #
 # expect holes; not ipsec-kernel-policy.sh as that filters
west #
 ipsec _kernel policy
src ::/0 dst ::/0 proto ipv6-icmp type 135
	dir fwd priority PRIORITY ptype main
src ::/0 dst ::/0 proto ipv6-icmp type 135
	dir in priority PRIORITY ptype main
src ::/0 dst ::/0 proto ipv6-icmp type 135
	dir out priority PRIORITY ptype main
src ::/0 dst ::/0 proto ipv6-icmp type 136
	dir fwd priority PRIORITY ptype main
src ::/0 dst ::/0 proto ipv6-icmp type 136
	dir in priority PRIORITY ptype main
src ::/0 dst ::/0 proto ipv6-icmp type 136
	dir out priority PRIORITY ptype main
west #
 ipsec whack --shutdown
Pluto is shutting down
west #
 # expect no holes; not ipsec-kernel-policy.sh as that filters
west #
 ipsec _kernel policy
west #
