Hi Rusty, That sounds great. Actually I'm looking for less user interface. I want to be able to call it from a Makefile to run unittests against a rule set before it goes into production.
Tom On Mon, Jul 1, 2013 at 9:46 AM, Alan Robertson <[email protected]> wrote: > Thanks Rusty! > > On 06/30/2013 09:22 PM, Rusty Russell wrote: >> Alan Robertson <[email protected]> writes: >>> Hi Rusty, >>> >>> Is there an iptables simulator that you know about. >>> >>> Something that you could give a description of a packet to that would >>> say "drop" or "allow" (with exit codes, etc). >>> >>> I know there's additional stateful filtering going on, but something >>> really simple like this might be useful (I know it would be to me). >>> >>> Thoughts? >>> >>> -- Alan Robertson >>> [email protected] >> There *kind of* was one, called nfsim. We used it for testing the basic >> firewalling code. >> >> This could have the cobwebs brushed off and have a decent front end >> added to make it quite a nice simulator... >> >> Cheers, >> Rusty. > > > -- > Alan Robertson <[email protected]> - @OSSAlanR > > "Openness is the foundation and preservative of friendship... Let me claim > from you at all times your undisguised opinions." - William Wilberforce > _______________________________________________ > Discuss mailing list > [email protected] > https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss > This list provided by the League of Professional System Administrators > http://lopsa.org/ -- Email: [email protected] Skype: YesThatTom Blog: http://EverythingSysadmin.com ⬤ . . : . ) ● ● ● ● _______________________________________________ Discuss mailing list [email protected] https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss This list provided by the League of Professional System Administrators http://lopsa.org/
