RE: [FW1] getting traceroute to work properly

["Gibson, Brian" <GibsonB@FW1-NOSPAMgruntal.com>]

Title: getting traceroute to work properly

If you want to get Tracert, running on NT, to work you will need the following.

 

Outbound ICMP Echo Requests.

Inbound ICMP Time Exceeded

 

This is for ICMP traceroutes.  UDP Echo traceroutes will require the UDP equivalent.

 

Is you internal network routable to the Internet? 

-----Original Message-----
From: Glenn Mabbutt [mailto:gmabbutt@quartetservice.com]
Sent: Monday, March 12, 2001 5:58 PM
To: 'fw-1-mailinglist@lists.us.checkpoint.com'
Subject: [FW1] getting traceroute to work properly

Greetings.  Sorry if this has been covered, I can't seem to find a list archive (links appreciated).

I'm trying to get traceroute to function properly (mostly from NT) from behind both FW-1 3.0 and 4.1.  However, simply adding the traceroute object and all the ICMP/echo objects I could find (inbound and outbound) doesn't seem to work.  Is there a quick and easy way to get traceroute to work properly (without opening Any inbound)??

Please be gentle, I'm a Checkpoint newbie...

Thanks in advance,
Glenn Mabbutt