Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 2 Nov 1998 22:19:00 -0800 (PST)
From:      Archie Cobbs <archie@whistle.com>
To:        avalon@coombs.anu.edu.au (Darren Reed)
Cc:        junkmale@xtra.co.nz, freebsd-security@FreeBSD.ORG
Subject:   Re: IPFW problems...
Message-ID:  <199811030619.WAA03913@bubba.whistle.com>
In-Reply-To: <199811011102.DAA13883@hub.freebsd.org> from Darren Reed at "Nov 1, 98 10:02:10 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Darren Reed writes:
> > > traceroute/UDP was fixed on the weekend last, the pc (ICMP) version may
> > > not yet work.
> > 
> > OK.  Good!  Can you guess when the other version will work?
> 
> My testing shows "traceroute -I" to work properly with NAT.

Normal traceroute should work through address translation,
assuming you're translating UDP packets as well as TCP.
If it doesn't, then the translation engine is not properly
"reverse translating" the inner packet in ICMP unreachable
messages (as it should).

-Archie

___________________________________________________________________________
Archie Cobbs   *   Whistle Communications, Inc.  *   http://www.whistle.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199811030619.WAA03913>