firewall traffic simulation

props666999 · 01-31-2006, 10:14 AM

Hello

I need to demonstrate my firewall script to my supervisor. Unfortunately there is no Internet connection at my supervisor's office. Moreover the
Iptables script assumes the usual eth0( ISP) and 2 clients( LAN). My laptop has just eth0 and threfore will be no connected to any other clients.

My question is : Is there a way to demonstrate the functionality(SNAT,DNAT etc) of this script somehow ?

Kind regards

gilead · 02-01-2006, 06:59 PM

Not without changing the script around - and that breaks the validity of the test (I'm not including the possibility of lugging your PC to your supervisor's office). Where did you develop the script initially? Do you have a test network or a window of time that you can use the production network?

Tools like nmap and hping (even telnet and a web browser) can be used to demonstrate connectivity. You can also use ethereal (or tcpdump) to show the packet traffic.

props666999 · 02-01-2006, 07:29 PM

Thanks gilead for the reply

my script assumes many things BUT i have concluded that using the nmap i will attack my loopback
the nmap reports inability to send packets( good) and the syslog many entries of attack. Not the best thing but how to test a firewall without being connected to other clients?

gilead · 02-02-2006, 02:49 AM

You really need to test in an environment as close to production as possible. There's a good chance you'll miss something if you try testing without connectivity to other hosts.