LeakTest for Hardware Firewall
Page 1 of 2 12 LastLast
Results 1 to 10 of 20

Thread: LeakTest for Hardware Firewall

  1. #1
    AO French Antique News Whore
    Join Date
    Aug 2001
    Posts
    2,126

    LeakTest for Hardware Firewall

    I'm looking for a program that will test my outbound connection for every port. I'm running a Nat Firewall and I pretty sure all outbound connection pass without problem but I want to be sure. I know their a few leak test out there but they test software firewall. I need one who test hardware firewall. Thank you.
    -Simon \"SDK\"

  2. #2
    Trumpet-Eared Gentoo Freak
    Join Date
    Jan 2003
    Posts
    992
    Let someone Nmap you
    Come and check out our wargame-site @ http://www.rootcontest.org
    We chat @ irc.smdc-network.org #lobby

  3. #3
    AO French Antique News Whore
    Join Date
    Aug 2001
    Posts
    2,126
    I don't need someone to test my inbound firewall. I need a program to test my OUTBOUND firewall..
    -Simon \"SDK\"

  4. #4
    I'm thinking your ACL's will give you a good idea as to what is blocked and what's not. Most firewalls by default allow everything out, nothing in. Using Nmap from the inside my give you what you want.
    - Boyam


  5. #5
    Senior Member br_fusion's Avatar
    Join Date
    Apr 2002
    Posts
    167
    http://grc.com/lt/leaktest.htm

    This may solve your problem.

  6. #6
    AntiOnline Senior Member souleman's Avatar
    Join Date
    Oct 2001
    Location
    Flint, MI
    Posts
    2,884
    grc leaktest sucks arse and it doen't work. There is a program called firehole (I think) that works better.

    find someone on the outside that will let you nmap them...that will work just as well.
    \"Ignorance is bliss....
    but only for your enemy\"
    -- souleman

  7. #7
    Senior Member
    Join Date
    Jun 2003
    Posts
    236
    I dont think NMAP will work in this case if I userstand what the problem is.

    NMAP will scan all the ports on the target computer but the client will still only use a few ports on the host machine and not test all outbound ports like he wants.
    That which does not kill me makes me stronger -- Friedrich Nietzche

  8. #8
    AntiOnline Senior Member souleman's Avatar
    Join Date
    Oct 2001
    Location
    Flint, MI
    Posts
    2,884
    well, does he want to test if it will connect to a certain outbound port, or if it will connect from a certain internal port? I guess thats the real question. If he is looking to outbound ports, nmap will work. If he is looking from certain internal ports...then I really have no idea unless you write your own program to do it.
    \"Ignorance is bliss....
    but only for your enemy\"
    -- souleman

  9. #9
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197
    SDK: I think you need someone to help you determine what ports your firewall will allow you internal machines to connect to on a remote machine.... Your firewall's egress rules..... It'll probably be a lot.....

    What you need to do is have someone with a good firewall, well logged, that will allow you to use a scanner that can be configured to scan every port available, there's a million of those out there..... Then that person can send you the log of the scan and you can see what went out. The scan should be a plain SYN scan so the remote will definitely pick it up.

    Another option is to give someone your IP address that you will appear to scan from that runs a Snort box outside the firewall and have then implement a rule as follows:-

    alert tcp xxx.xxx.xxx.xxx any -> any any (msg; "Bills test": flags; S; classtype: bad-unknown:)

    Where the xxx.xxx.xxx.xxx is your IP address.

    The second option will actually work better IMO, since the logging on some firewalls will ignore a whole bunch of stuff unless the work is put in to log it.

    Hope this helps
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

  10. #10
    Senior Member
    Join Date
    Jul 2003
    Posts
    106
    scrip it w/ netcat ... if you want help pm me
    i\'m the guy who bitched out a girl about writting poems in General Chat... Now everyone thinks I hate women and that I\'m gay ... live and learn ... hehe

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •