From owner-freebsd-net@FreeBSD.ORG Fri Nov 17 10:24:11 2006 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 43BDE16A403 for ; Fri, 17 Nov 2006 10:24:11 +0000 (UTC) (envelope-from greg@bestnet.kharkov.ua) Received: from relay.bestnet.ua (relay.bestnet.ua [193.124.57.92]) by mx1.FreeBSD.org (Postfix) with ESMTP id 94B6243D4C for ; Fri, 17 Nov 2006 10:24:10 +0000 (GMT) (envelope-from greg@bestnet.kharkov.ua) Received: from relay.bestnet.ua (db.bestnet.ua [127.0.0.1]) by relay.bestnet.ua (Postfix) with ESMTP id 73D73FB0039 for ; Fri, 17 Nov 2006 12:24:04 +0200 (EET) Received: from [80.92.224.11] (greg.bestnet.kharkov.ua [80.92.224.11]) by relay.bestnet.ua (Postfix) with ESMTP id 4F5C7FB0014 for ; Fri, 17 Nov 2006 12:24:04 +0200 (EET) Message-ID: <455D8DF2.2020105@bestnet.kharkov.ua> Date: Fri, 17 Nov 2006 12:24:50 +0200 From: Gregory Edigarov User-Agent: Thunderbird 1.5.0.7 (X11/20061114) MIME-Version: 1.0 To: freebsd-net@freebsd.org Content-Type: text/plain; charset=KOI8-R; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV using ClamSMTP Subject: How to test a firewall with NAT? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Nov 2006 10:24:11 -0000 Hello Everybody, I am trying to move one of my servers/routers from linux/iptables to freebsd/pf, and need a methodology of testing the pf firewall ruleset before it will go in production. I cannot experiment on live network, because it's a busy server. I only have one other machine available. What can I do and what tool can you recommend? Thank you. -- With best regards, Gregory Edigarov