[sysmon-help] Testing if firewall is up (maybe using reverse)

[John Gateley]

Hi,

I'd like to do a test that ensures my firewall is up and blocking.

I made a test from a sysmon machine outside the firewall

object zap-firewall {
        ip "1.1.1.1"; # ip address of an IMAP server inside the firewall
        type tcp;
        reverse;
        port 993;
        desc "zap firewall";
        dep "sysmon-host";
        contact "alert at jriver.com";
};

I tried configuring the firewall both to drop the packet
and to refuse the packet. In both cases, "reverse" doesn't
do anything, the test shows on the web page as down.

Any suggestions?

Thanks,

j