Software guide
This walktrough aims to provide a comprehensive view on the software, its capabilities, commands, and funcionalities, providing at the end an example of a real scenario.
This is the main Tab for the firewall testing in the simulation. In here it's possible to configure tests to be executed on the simulation scenario.
Options to be configured:
-
Source IP: Which machine and interface is going to send the packet;
-
Destination IP: Which machine and interface is going to be the target of the packet;
-
Protocol: Which type protocol packet is going to be sent;
-
Destination Port: Which port is going to be the destination of the packet;
-
Expected sucess: Configures if the desired outcome is a sucessful receival of the packet or the opposite.
The tests made for a scenario can be saved for later use, or imported from a saved file. With the tests configured, it's possible to test all lines in bulk, or a line can be selected for individual testing, or for its deletion. With a double click on a line, it can be edited, in which its properties can be changed using the selectors above, and its changes applied with the "Save Edit" button.
This tab allows for fetching, listing, verifing and editing firewall rules on each host and firewall.
This tab shows which hosts are available in the simulation, its interfaces, its IP addresses and their software status. It allows for turning the software on for the hosts if it is off.
This tab configures settings related to the software, its default configuration files, and its output.
Options to be configured:
-
Firewall Directory in the containers: Which directory in the containers the firewall scripts will be located;
-
Reset Rules File: Which file has the scripts to reset firewall rules
-
Firewall Rules File: Which file has the default firewall rules
-
Server ports file: Which file configures the standard open ports for the tests on the containers
-
Docker Image Name: A commom name to Docker containers for the firewall tester to recognize as part of the scenario.
-
Show Container ID Collumn: Toggles wether the Container ID is shown on Firewall Test Tab
-
Include in Firewall Listing: Toggles options on what is shown on Firewall Rules Tab
This tab shows a quick introduction on the software, its developers, and allows the user to seek for this document for help.
The first step is to load a GNS3 project, or to configure one with the GNS3 appliances and the docker containers, and start the machines on the project.
In this walktrough, we will be using this project.
After that, you can open the firewall tester, where you will see the Firewall Test tab.
Here we can configure a simple test, sending a TCP packet from Host 1 to Host 2 on port 80 and expecting success.
After that, we can check the firewall Rules, and edit them to match our desired behaviour
And after testing the packet, we can see the result: the packet was sent successfully.
