O-X-L/firewall-testing-framework 0.0.4

on GitHub

Features

• Basic Command-Line Interface
• Basic Documentation
• Basic Abstracted logic
  • Support for Vendor-specific Plugins
    • System-configuration
    • Translating configuration
    • Rule-Matching
  • Router Simulator
    • Query source-route
    • Query destination-route
  • Firewall Simulator
    • Ruleset
    • Tables
    • Chains
      • Sub-Chains (jump, goto)
    • Rules
    • NAT
      • DNAT
      • SNAT
  • Main Simulator
    • Inbound- and outbound-network-interface discovery
    • Detecting if IPs are local to the firewall-system
    • System-specific filters that are outside the control of the firewall-ruleset (like Linux kernel networking)
• Lots of Unit-Tests (83% coverage)

Plugins

• Support for Netfilter on Linux

  • Linux Network Interfaces (iproute2)
  • Linux Routing (iproute2)
  • Experimental Netfilter (NFTables/IPTables) support

Test Coverage

83%