Firewall Security Tests

[servin247365]

i was wondering if there are any good firewall testers. i have just got done biulding a firewall from scratch now i need to test it.

 

[Lemon law]

I usually go to Shields up---at Gibson research---symantec has something similar---there are other sites and programs.

 

[InlineFive]

I would have a friend run a few different scans against you with nMap.

 

[sieistganzfett]

i also use the shields up test. it will tell you if you still have open ports showing up from the internet side. http://www.grc.com/stevegibson.htm#projects is a link, i dont know of any other programs that are easiest for you to try from the inside location.

 

[cmetz]

Shields Up is a popular tester, but it's defective. Google will tell you more.

nmap is a great quick blunt instrument test. To really test, you need to build yourself a scripted automated test, using something like netcat. Basically, you want to verify that what you expect to go through goes through correctly, and what you expect not to go through does not go through. Every explicit permit and deny case should have at least one test case.

 

[ChAoTiCpInOy]

Shields Up is good. And if you are a security person, listen to Security Now! with Steve Gibson the person that came up with Shields Up. It's pretty enlightening.

 

[Lemon law]

Won't argue the point on a complete or perfect firewall test---the point being--if you pass shields up your chanced of being hacked via firewall related stuff is vanishingly small.
Your greatests security danger is and remains the person looking at your monitor---namely you.

But a firewall is but one defence layer in a well defended PC---by itself a firewall is not enough.

 

[n0cmonkey]

Originally posted by: ChAoTiCpInOy
Shields Up is good. And if you are a security person, listen to Security Now! with Steve Gibson the person that came up with Shields Up. It's pretty enlightening.

Typically Gibson is generally a tool.

Although, when he isn't blathering on about how he told Microsoft that raw sockets are evil he has some okay information.

 

[JackMDS]

I would Not use Gibson?s Shield- Up to test the system of an online Bank.

For regular Home/SOHO users it is more the adequate.:thumbsup: