From owner-freebsd-security  Mon Nov  2 22:19:20 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id WAA20957
          for freebsd-security-outgoing; Mon, 2 Nov 1998 22:19:20 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from whistle.com (s205m131.whistle.com [207.76.205.131])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id WAA20951
          for <freebsd-security@FreeBSD.ORG>; Mon, 2 Nov 1998 22:19:18 -0800 (PST)
          (envelope-from archie@whistle.com)
Received: (from smap@localhost) by whistle.com (8.7.5/8.6.12) id WAA08967; Mon, 2 Nov 1998 22:19:10 -0800 (PST)
Received: from bubba.whistle.com(207.76.205.7) by whistle.com via smap (V1.3)
	id sma008965; Mon Nov  2 22:19:00 1998
Received: (from archie@localhost) by bubba.whistle.com (8.8.7/8.6.12) id WAA03913; Mon, 2 Nov 1998 22:19:00 -0800 (PST)
From: Archie Cobbs <archie@whistle.com>
Message-Id: <199811030619.WAA03913@bubba.whistle.com>
Subject: Re: IPFW problems...
In-Reply-To: <199811011102.DAA13883@hub.freebsd.org> from Darren Reed at "Nov 1, 98 10:02:10 pm"
To: avalon@coombs.anu.edu.au (Darren Reed)
Date: Mon, 2 Nov 1998 22:19:00 -0800 (PST)
Cc: junkmale@xtra.co.nz, freebsd-security@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL38 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Darren Reed writes:
> > > traceroute/UDP was fixed on the weekend last, the pc (ICMP) version may
> > > not yet work.
> > 
> > OK.  Good!  Can you guess when the other version will work?
> 
> My testing shows "traceroute -I" to work properly with NAT.

Normal traceroute should work through address translation,
assuming you're translating UDP packets as well as TCP.
If it doesn't, then the translation engine is not properly
"reverse translating" the inner packet in ICMP unreachable
messages (as it should).

-Archie

___________________________________________________________________________
Archie Cobbs   *   Whistle Communications, Inc.  *   http://www.whistle.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message