Written originally for the Linux FreeS/WAN project <m[blue]https://www.freeswan.orgm[]> by Michael Richardson. Rewritten in python by Paul Wouters
Verify was converted from shell to perl to python, and the MASQUERADING/NAT rule tests still need to be ported. The ss command is around in various non-intuitive and buggy versions, causing some false-positives with respect to listening on UDP port 500 and 4500. See https://bugzilla.redhat.com/show_bug.cgi?id=829630
Paul Wouters