Software for Testing Access List Integrity
TBMG-6816
04/01/2000
- Content
Many networks rely on firewalls or filtering routers for frontline network security. Packet filtering firewalls or routers filter incoming or outgoing packets based on a set of access rules. The IP (Internet Protocol) Packet Generator computer program assists in verifying that a packet filtering firewall is configured correctly, by detecting security holes in the firewall's filtering rules.The IP Packet Generator enables the user to build TCP/IP (Transmission Control Protocol/Internet Protocol) packets and transmit them via the network, to detect errors in access list configuration.The user can specify the source IP address of a packet to simulate attempted access from a remote host. The user can also specify the destination IP address, the type of packet, the destination port number, the size of the packet, the number of packets to send, and the packet rate. Thus, the software helps the user perform an exhaustive test of the access list.
- Citation
- "Software for Testing Access List Integrity," Mobility Engineering, April 1, 2000.