Testing (1)

Have an IP Filter box snoop the network
Feed all packets into the filter engine and check if they would be blocked. If so: make a syslog entry
Make very sure the box does not route any packets
Dump all packets to disk (using e.g. tcpdump)

Have an IP Filter box snoop the network