ITVal 0.7 review

ITVal is a decision-diagram based query engine for testing and verifying iptables firewalls. Because firewalls can be very complic

License: GPL (GNU General Public License) File size: 0K Developer: Robert Marmorstein

0

ITVal is a decision-diagram based query engine for testing and verifying iptables firewalls.

Because firewalls can be very complicated, it is often difficult to know whether your firewall is correctly configured to protect against various attacks.

ITVal allows the system administrator to quickly and easily verify that the firewall setup satisfies a set of security properties expressed as queries.

Queries are specified in a simple English-like language that is very easy to use. Advanced firewall techniques, such as NAT and stateful filtering, are supported.

What's New in This Release:
Version 0.7 contains some bug fixes and adds support for address ranges both in queries and in group/service definitions. Support for the "CLASSES" query has been improved, but should still be considered beta.