how to test apf firewall on network

[deepmala8]

I have installed apf firewall in my system.can anyone tell me how test its features so that i can say my system is fully protected.i have tested basic features such as allow/deny rlogin,ping,etc
I want to test
1.Reactive address blocking feature
2.How to enable ftp from my machine as all inbound rules dropped
3.how to test port forwarding feature
4.how to test ping with icmp/sec feature i.e. how to control Dos attacks ,say more than specified pings are attacking my system then how to cntrol it.I have set ICMP_LIM=30/s but it is not controlling ping after reaching the limit.
Kindy help

[hans51]

to secure and test security certainly there are multiple solutions
one way I would do / have done is

first secure install
then run a full nessus scan on my system without firewall
solve any security issues detected by nessus
then activate firewall
and run nessus once again

if you do so - FIRST make sure you have your test machine white listed (IP) else you may have yourself shut out
after above you also may add additional security features such as mod_security and/or snort if your protected machine is a www server