On 12/12/03 18:13 +0530, Vinayakam Murugan wrote:

Is there a how-to on how to test firewalls? Any links / pointers would be great.

I recommend looking at reading the archives of the pen-test list at securityfocus.com.

Some questions to start you off: What resources are you trying to rpotect? What is the defense mechanism? What attacks does it defend against? Can you modify the attack slightly and see it go through your firewall? What logging is your firewall providing? What analysis does your firewall provide? If the firewall is not providing reporting facilities, can you script something?

Devdas Bhagat