What would be a good approach (other than a port scan) to pen test a firewall and make sure the rules are setup correctly ?

Are their any common/recommended/standard open source tools that are used in the industry. If anyone can point to any good resources or whitepapers, that would be really helpful.