This is an old revision of the document!
Firewall Test Suite
- Student: Ahsan Barkati (ahsanb@freebsd.org)
- Mentors:
- Kristof Provost (kp@freebsd.org)
- Tom Jones (thj@freebsd.org)
The Code
The Common Firewall Test Suite can be found here: https://github.com/ahsanbarkati/freebsd/tree/projects/firewall_tests/tests/sys/netpfil/common
- The common tests sub-directory within FreeBSD source tree: tests/sys/netpfil/common
Differential revisions Submitted
| Differential | Title | Status |
|---|---|---|
| D21065 | Add the framework and pass/block test | Merged ✔ |
| D21199 | Add the nat test for all the firewalls | Merged ✔ |
| D21276 | Move pft_ping and sniffer from pf to the common directory | Open  |
| D21305 | Add Type of Service Tests for multiple firewalls | Open |
| D21307 | Add too many fragments test for multiple firewalls | Open |
Project Overview
There are three firewalls in FreeBSD; pf, ipfw and ipf. FreeBSD is one of the very rapidly growing operating system and this fact brings in the need for testing and monitoring of various sub-systems within it. Firewalls are one of the most important components of the network. So writing tests for all the three firewalls is an important task. But because of commonalities in the features of the three firewalls with obvious differences, there will be code duplicacy in the tests of them. This project aims in creating a framework in which a common test can be written and that should be able to test all the three firewalls.