Re: Firewall Testing Software

From: <defaillance(at)hushmail.com>
Date: Thu Apr 10 2003 - 09:02:43 EDT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Generate the packet against the ruleset you would like to test using Nemesis and watch the reply thru Tcpdump or any packet capture program of your choice...

ive seen a windows port of Nemesis latelly, but dont actually know if all the feature are availlable on it.

both program are availlable on *nix and win32

tcpdump: 
http://www.tcpdump.org/ win32/*nix
nemesis:
http://www.packx.net/packx/html/en/index-en.htm  win32
        
http://www.packetfactory.net/projects/nemesis    *nix

Matt ~

Colin Greg wrote:

Hi,

Can anyone recommend good products for testing firewall rulesets?

I have searched on the web and only come up with one, Firewall Informer

from Blade, and I have not looked at this yet but I thought I would ask

the experts.

Merci
CG

• -------------------------------------------------------------- Costs are climbing and complaints are rising as SPAM overloads your e-mail servers and Inboxes SurfControl E-mail Filter puts the brakes on spam & viruses and gives you the reports to prove it. http://www.securityfocus.com/SurfControl-pen-test2 Download a free trial and see just what's going in and out of your organization.
• --------------------------------------------------------------

-----BEGIN PGP SIGNATURE-----
Version: Hush 2.2 (Java)
Note: This signature can be verified at https://www.hushtools.com/verify

wmAEARECACAFAj6Va3EZHGRlZmFpbGxhbmNlQGh1c2htYWlsLmNvbQAKCRAAqpYJlh8f xbj/AJwN+8CeisJjqm4Gni45b05jelpnZACeNNFUapNMBLCYpymUBGWEquL00eo= =+x/e
-----END PGP SIGNATURE-----
Concerned about your privacy? Follow this link to get FREE encrypted email: https://www.hushmail.com/?l=2

Big $$$ to be made with the HushMail Affiliate Program: https://www.hushmail.com/about.php?subloc=affiliate&l=427

---

Costs are climbing and complaints are rising as SPAM overloads your e-mail servers and Inboxes SurfControl E-mail Filter puts the brakes on spam & viruses and gives you the reports to prove it.
http://www.securityfocus.com/SurfControl-pen-test2 Download a free trial and see just
what's going in and out of your organization.

---

Received on Thu Apr 10 17:42:32 2003