1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML>
<HEAD>
<link rel="stylesheet" type="text/css" href="css.css">
<TITLE>FireHOL, Tools to audit your security and test your firewall.</TITLE>
<meta name="author" content="Costa Tsaousis">
<meta name="description" content="
Home for FireHOL, an iptables stateful packet filtering firewall builder for Linux (kernel 2.4),
supporting NAT, SNAT, DNAT, REDIRECT, MASQUERADE, DMZ, dual-homed, multi-homed and router setups,
protecting and securing hosts and LANs in all kinds of topologies. Configuration is done using
simple client and server statements while it can detect (and produce) its configuration
automatically. FireHOL is extremely easy to understand, configure and audit.
">
<meta name="keywords" content="iptables, netfilter, filter, firewall, stateful, port, secure, security, NAT, DMZ, DNAT, DSL, SNAT, redirect, router, rule, rules, automated, bash, block, builder, cable, complex, configuration, dual-homed, easy, easy configuration, example, fast, features, flexible, forward, free, gpl, helpme mode, human, intuitive, language, linux, masquerade, modem, multi-homed, open source, packet, panic mode, protect, script, service, system administration, wizard">
<meta http-equiv="Expires" content="Wed, 19 Mar 2003 00:00:01 GMT">
</HEAD>
<BODY bgcolor="#FFFFFF">
<center>
<script type="text/javascript"><!--
google_ad_client = "pub-4254040714325099";
google_ad_width = 728;
google_ad_height = 90;
google_ad_format = "728x90_as";
google_ad_channel ="";
google_page_url = document.location;
google_color_border = "336699";
google_color_bg = "FFFFFF";
google_color_link = "0000FF";
google_color_url = "008000";
google_color_text = "000000";
//--></script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
</center>
<p>
To test your firewall there are a few software tools and a few online services to help you.
<p>
I suggest the following tools (of course you need two computers to run the test):
<ul>
<li><a href="http://www.nessus.org">Nessus</a> is probably the best open source security scanner available.
<br><a href="http://www.nessus.org">Nessus</a> not only checks the firewall of a host, but also scans for known application vulnerabilities.
<br>I highly recommend <a href="http://www.nessus.org">Nessus</a> for periodic (weekly, monthly, etc) scans.
<br>For <a href="http://www.redhat.com">RedHat</a> systems you can find pre-build RPMs at <a href="http://freshrpms.net">FreshRPMs</a>.
<br>
</li>
<li><a href="http://www.insecure.org/nmap/">Nmap</a> ("Network Mapper") is an open source utility for network exploration or security auditing.
<br><a href="http://www.redhat.com">RedHat</a> (and possibly other) systems have <a href="http://www.insecure.org/nmap/">Nmap</a> pre-installed.
<br>
</li>
</ul>
<p>
There are a number of sites that offer firewall testing services to everyone:
<ul>
<li><a href="http://www.auditmypc.com/">AuditMyPC</a>
<br>
</li>
<li><a href="http://www.dslreports.com/scan">BroadBand Reports</a> port scanner.
<br>
</li>
<li><a href="http://www.securityspace.com/sspace/index.html" target="securityspace">Security Space</a>, a commercial service with a free scan.
<br>These people are using something like <a href="http://www.nessus.org">Nessus</a> (if not <a href="http://www.nessus.org">Nessus</a> itself).
<br>
</li>
<li><a href="https://grc.com/x/ne.dll?bh0bkyd2">Shields UP!!</a> NanoProbe Technology Internet Security Testing for... Windows Users.
(note: well, it says for Windows, but it is a port scanner with a limited range of ports to be scanned...)
<br>
</li>
<li><a href="http://scan.sygate.com">SyGate Online Services (S.O.S.)</a> Very nice site to quickly check the security
of your system. They have a <b>stealth</b> scanner that tries to break the firewall with a few nice ways (this can show
you the difference between FireHOL and a hand made stateless firewall).
<br>
</li>
</ul>
<p>
Other testers on the net:
<ul>
<li><a href="http://www.powertech.no/smurf/">Smurf Amplifier Registry (SAR)</a> The SAR is a tool for Internet administrators being attacked by or implicated in smurf attacks, or those who wish to take precautions.
<br>
</li>
</ul>
<p>
Other useful links:
<ul>
<li><a href="http://www.insecure.org/tools.html">Top 50 Security Tools</a> for UNIX</li>
</ul>
<p>
<hr noshade size=1>
<table border=0 width="100%">
<tr><td align=center valign=middle>
<A href="http://sourceforge.net"><IMG src="http://sourceforge.net/sflogo.php?group_id=58425&type=5" width="210" height="62" border="0" alt="SourceForge Logo"></A>
</td><td align=center valign=middle>
<small>$Id: fwtest.html,v 1.10 2004/10/31 23:43:25 ktsaou Exp $</small>
<p>
<b>FireHOL</b>, a firewall for humans...<br>
© Copyright 2004
Costa Tsaousis <a href="mailto: costa@tsaousis.gr"><costa@tsaousis.gr></a>
</body>
</html>
|
