firewall rule testing

[BruceLee]

Hi,

general question of interest.
How do you test more complex firewall rulesets?
Usually I test it with a combination of dev environment, netcat and wireshark plus standard tools like ping, bping, trace route etc.
What do you take for that purpose?

Thanks for any participation

[scott]

nmap is a great tool for it.

Theres a whole chapter in the book about this btw.

[BruceLee]

ahh, great to know. Thanks. Time to buy your book

What do you think about the book from Gordon “Fyodor” Lyon additionally?
http://www.amazon.com/Nmap-Network-Scan ... 172&sr=8-1

[mikeshinn]

Considering that he wrote nmap, I'm sure its spot on.

[BruceLee]

Thanks a lot. I will get yours...if needed the other one too.
I want to check the content of the book in a bookstore first.