check access <IPAddr> [table=<routetable>]
Reports access control checks for a source address to various internal services. This is separate from any firewalling.
check firewall source-ip=<IPAddr> target-ip=<IPAddr> protocol=<unsignedByte> [source-port=<unsignedShort>] [target-port=<unsignedShort>] [source-route-ip=<IPAddr>] [table=<routetable>] [evil=<boolean>] [cug=<unsignedShort>]
Allows a detailed check of rule-sets and rules. This reports the rule-sets and rules that matched and the actions taken.