He was asking for a tool to review existing rules, though. If you have
to review an existing iptables ruleset, you will have to deal with
iptables syntax I'm afraid.

Regards
Ansgar wiechers

On 2012-05-04 Steve Elkins wrote:
> Check out http://www.fwbuilder.org/
>
> You create your rules and then output in iptables format (or many others!)
>
>
> -----Original Message-----
> From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of Thugzclub
> Sent: Friday, 4 May 2012 2:08 PM
> To: pen-test (at) securityfocus (dot) com [email concealed]
> Cc: security-basics (at) securityfocus (dot) com [email concealed]
> Subject: Firewall Review
>
> Hi,
>
> I need to review an IPtables rule set but Iptable syntax is killing me :((. Any guidance on tools that can simplify it?
>
>
> cheers
>
>
> On 3 May 2012, at 20:12, David Bridgman <David.Bridgman (at) lifelock (dot) com [email concealed]> wrote:
>
> > You could get a product like Splunk or setup a Linux box with syslogng and zabbix for the monitoring and logging. External companies that monitor firewalls usually create an ssl or vpn connection via the internet to your devices to pull in logging information. Depending on what you would like them to do, just logging or config changes you will need to give them access for this.
> >
> > David Bridgman, CISSP
> > Sr. Information Security Engineer | LifeLock® - Relentlessly
> > Protecting Your IdentityT
> > 480.457.2029 Office | 480.253.2633 Cell David.Bridgman (at) lifelock (dot) com [email concealed]
> > 60 E. Rio Salado Parkway, Suite 400, Tempe, AZ 85281
> >
> >
> >
> > -----Original Message-----
> > From: listbounce (at) securityfocus (dot) com [email concealed]
> > [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of a bv
> > Sent: Thursday, May 03, 2012 5:25 AM
> > To: security-basics (at) securityfocus (dot) com [email concealed]
> > Subject: Firewall availability and reporting
> >
> > Hi,
> >
> > Im again in need of firewall availability and reporting. Is there a solution you can recommend? There are companies at web which says we are doing firewall external monitoring but i doent know how do they technically do that and how reliable and good working .
> >
> >
> > Regards
> >
> > ----------------------------------------------------------------------
> > -- Securing Apache Web Server with thawte Digital Certificate In this
> > guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
> >
> > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
> > 42f727d1
> > ----------------------------------------------------------------------
> > --
> >
> >
> > ______________________________________________________________________
> > _______ The information contained in this transmission may contain
> > privileged and confidential information. It is intended only for the use of the person(s) named above. If you are not the intended recipient, you are hereby notified that any review, dissemination, distribution or duplication of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.
> > ______________________________________________________________________
> > _______
> >
> > ----------------------------------------------------------------------
> > -- Securing Apache Web Server with thawte Digital Certificate In this
> > guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
> >
> > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
> > 42f727d1
> > ----------------------------------------------------------------------
> > --
> >
>
> ------------------------------------------------------------------------

> Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
> ------------------------------------------------------------------------

>

--
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

[ reply ]