A Tool for Automated Iptables Firewall Analysis
Firewall design: consistency, completeness, and compactness