As already mentioned all you need to validate a f/w's ruleset ie: is UDP 53
inbound allowed and so on is a
good packet crafting program, and tcpdump to collect and analyze the
responses. What is pretty much a must
though is an excellent understanding of the protocols, and how they work.
Should you need an example or
tutorial of how HPing works then check the homepage and there are a couple
that I wrote.
Enjoy
----- Original Message -----
From: "Synister Syntax" <synistersyntaxlist@gmail.com>
To: "Samuel R. Baskinger" <sbaskinger@lumeta.com>;
<firewalls@securityfocus.com>
Sent: Monday, December 12, 2005 5:20 PM
Subject: Re: Tool for to test firewall
I would also agree, nmap/amap is a great start. After that
crafting packets would be the next step. Useing nemesis might work.
Another Packet Crafting tool is IP Sorcery.
http://freshmeat.net/projects/ipsorcery/
Don't forget this would be free as well, but don't let the words
free make you doubt the power.
On 12/8/05, Samuel R. Baskinger <sbaskinger@lumeta.com> wrote:
I tend to agree. You can do a lot of good validation using bash + nmap +
nemesis + tcpdump.
Sam
DavidMZendzian wrote:
>nmap
>:-)
>
>-----Original Message-----
>From: "Ovidio Gutierrez"<OGutierrez@blx.com>
>Sent: 12/06/05 5:47:40 AM
>To: "firewalls@securityfocus.com"<firewalls@securityfocus.com>
>Cc:
>Subject: Tool for to test firewall
>
>Hi everybody
>
>Does anybody know a tools for to test a firewall checkpoint or others.
>example: to view the rule set, etc...
>
>Thank
>
>
>
>
>
>
>
--
Regards,
SynSyn
Netowork Manager, Server Administrator, Security Specialist
(http://www.teamtrinix.com)
