Testing if firewall is up (maybe using reverse)

John Gateley <[email protected]> Tue, 3 Apr 2007 14:03:01 -0500
Newsgroups gmane.comp.monitoring.sysmon.help
Organization J. River, Inc.
Message-ID <[email protected]>
Hi,

I'd like to do a test that ensures my firewall is up and blocking.

I made a test from a sysmon machine outside the firewall

object zap-firewall {
        ip "1.1.1.1"; # ip address of an IMAP server inside the firewall
        type tcp;
        reverse;
        port 993;
        desc "zap firewall";
        dep "sysmon-host";
        contact "[email protected]";
};

I tried configuring the firewall both to drop the packet
and to refuse the packet. In both cases, "reverse" doesn't
do anything, the test shows on the web page as down.

Any suggestions?

Thanks,

j