consider IPtables in Linux. Read iptables tutorials. Hope this helps.

Thank you Mr Virendra Yadav for your answer. I already read about the iptables. In fact i have create my own firewall and i want test it with the FIREMAN toolkit. But i don't know how to install it and how use it.

Mohamed, did you ever get an answer to this? I am currently in the same boat that you were then. If you could point me in the proper direction to install and actually use it, I would greatly appreciate it.

Thank you.

Hi Glenn McHenry,

Unfortunately I am no longer working on this project and my information about FIREMAN Toolkit are not updated.

My goal was to evaluate only the firewall's rules configuration and running time. I've read that FIREMAN Toolkit can do firewall's rules modeling and analysis, and rules miss-configurations and inconsistencies checking. Unfortunately, I didn't find great references or tutorials about FIREMAN Toolkit at that time. So I didn't use it to evaluate and analyze my firewall. However, I have deployed my firewall in a small infrastructure using 4 machines to simulate different services such as the firewall, web server, mailing server, storage server, DMZ, etc. I have simulated different access scenarios based on IP addresses and PORT numbers, and I have collected the firewall's stats data manually for analysis. For me the best way to evaluate and analyze a firewall is to deploy it in a real world infrastructure, create a complete model of all rules, then test the firewall in different scenarios.

Regards,

Hi Luay Abdulwhid Shihab,

FIREMAN is toolkit for firewall modeling and analysis. You can read more about it in this paper:Article FIREMAN: A toolkit for firewall modeling and analysis

http://web.cs.ucdavis.edu/~hchen/paper/ieeesp2006.pdf

http://web.cs.ucdavis.edu/~su/fireman.pdf