You might want to have a look at firewalk, understanding it is one tool for looking at one aspect of a firewalls configuration.

http://www.packetfactory.net/firewalk/