Assitch is a remote packetfilter analyzer, that detects in and OUT rules by doing ACK scanning. (It's useless against state-full filters.) Assitch is 3 years old, but still useful for debugging filter rules.
66592b879e744c047d64cb18485d1014112959a8455bd5b9242187637f566877