dru145 wrote:

Even better have the secondary firewall ssh (since it is a firewall, I don't want to use telnet) to the primary and test to see if the firewall daemon is running.

This doesn't answer your question, but I would be concerned about even allowing SSH to run on a firewall. Maximum security can be gained by ensuring that a person must be physically present at the firewall to do anything with it. Any time a remote connection is allowed, security is weakened.

Cheers,
Ovid

Join the Perlmonks Setiathome Group or just click on the the link and check out our stats.