<div>
<div class="content wysiwyg-content">
I am looking for software or a method to test my firewall setup against various attacks, as well as a log parser that will alert me when things get fishy. &nbsp;Something visual is preferred but not required. &nbsp;My firewall is running on an embedded distribution of linux, with a reasonably recent version of iptables. &nbsp;Remote logging and parsing is available on a full linux box.
</div>
</div>


I am looking for software or a method to test my firewall setup against various attacks, as well as a log parser that will alert me when things get fishy.  Something visual is preferred but not required.  My firewall is running on an embedded distribution of linux, with a reasonably recent version of iptables.  Remote logging and parsing is available on a full linux box.

Intrusion detection and firewall validation

Software firewalls, also known as host-based firewalls, provide a layer of software on one host that controls network traffic in and out of that single machine. Most operating systems now include firewall software, but many available software firewalls include central distribution, antivirus systems and disaster recovery.

Software Firewalls

A vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness, known as the attack surface. Vulnerability management is the cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities. Other vulnerabilities include security risks, security defects and constructs in programming languages that are difficult to use properly.

Vulnerabilities

The variety of Linux distributions creates myriad issues relating to configuration and operations when computers are networked, not the least of which is the use of various network management applications, some of which are included with specific distributions, while others are standalone applications.