Testing

Have an IP Filter box snoop the network
Feed all packets into the filter engine and check if they would be blocked. If so: make a logging entry
Log all packets
Check if logged packets were blocked correctly by inspecting the whole TCP session
Testing is non-intrusive and done on production network

Have an IP Filter box snoop the network