Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 20 Aug 2004 13:23:14 -0400
From:      Barney Wolff <barney@databus.com>
To:        Gregory Kuhn <freebsd-net@lists.ctch.net>
Cc:        freebsd-net@freebsd.org
Subject:   Re: Traceroute Anomaly
Message-ID:  <20040820172314.GA73663@pit.databus.com>
In-Reply-To: <6.1.2.0.2.20040820102349.02ac6440@mail.ctch.net>
References:  <6.1.2.0.2.20040820102349.02ac6440@mail.ctch.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Aug 20, 2004 at 11:01:31AM -0600, Gregory Kuhn wrote:
> 
>         My question is this;
> Why can I do a traceroute using the DOS version of traceroute (tracert) to 
> any of my FreeBSD boxes, but I am not able to do so from another FreeBSD 
> box?  Furthermore, it is not just from my own boxes that I am unable to do 
> a traceroute.  Using the traceroutes listed at www.traceroute.org I again 
> am unable to trace back to my FBSD boxes.

If I remember correctly, MS's tracert sends ICMP packets, while traditionally
Unix traceroutes send UDP.  You're blocking the UDP somewhere, presumably.
tcpdump and/or adding logging to your firewall rules should tell you more.

-- 
Barney Wolff         http://www.databus.com/bwresume.pdf
I'm available by contract or FT, in the NYC metro area or via the 'Net.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040820172314.GA73663>