ruleset debugging made easy


now this is awesome to debug your ruleset

log on every rule not feasible
especially if the firewall is in production

would be awesome to "trace" rule matching
using a test box, aka one single source IP

so let's implement that ')