an open source solution for testing nat ' d and nested iptables firewalls .
Firewall design: consistency, completeness, and compactness