Hi all, is there exist a tool that would check if a given packet would pass the firewall or not and which rule would apply? I'm looking for something like
$ checkpacket --in-interface dc0 --source 10.20.30.40:1234 \ --destination 1.2.3.4:5678 --proto tcp --flags SYN,URG,DF --tos 0x10 ... ...and see which rules passed and what's the final decision. It would be also great to see into which queue would it belong. Is there something like this? Michal Ludvig
