[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] tracert question?



Isn't this because of dissallowing icmp replies?  Maybe
someone who understands icmp better than I can explain it to us.
To support this theory is the fact that unix traceroute works, which
uses udp.
 
Hal
 

Hal Dorsman
Network Administrator
Rocky Mountain Elk Foundation
Missoula, Montana USA
[email protected]

-----Original Message-----
From: Don Leeper [mailto:[email protected]]
Sent: Friday, October 11, 2002 10:35 AM
To: [email protected]
Subject: Re: [FW-1] tracert question?

I am running FP2 as well. I didn't have this problem before.

 

-----Original Message-----
From: [email protected] [mailto:[email protected]]
Sent: Friday, October 11, 2002 6:58 AM
To: [email protected]
Subject: Re: [FW-1] tracert question?

 


hi,
I got the same problem also, It only after I upgrade to NG FP2.   Does any experience the same problem in FP3?

chiam
Singapore




Don Leeper <[email protected]>        11/10/2002 08:43 PM
Sent by: Mailing list for discussion of Firewall-1 <[email protected]>

Please respond to Mailing list for discussion of Firewall-1

 

To:        [email protected]
cc:        (bcc: CHIAM Chor Chuah/Consultant - NW/iSTT/ST Group)
Subject: [FW-1] tracert question?

 

 

 

 





Can someone tell me why, when I do a tracert I get request timed out but when I get to the address it comes back. My internals are nated to the fw external ip. I allow my pc anywhere. What is the issue with this. I copied what I see down below. Thanks in advance.
 
 
Tracing route to www.yahoo.akadns.net [66.218.71.86]
over a maximum of 30 hops:
 
  1    <1 ms    <1 ms    <1 ms  192.168.1.221
  2     *        *        *     Request timed out.
  3     *        *        *     Request timed out.
  4     *        *        *     Request timed out.
  5     *        *        *     Request timed out.
  6     *        *        *     Request timed out.
  7     *        *        *     Request timed out.
  8     *        *        *     Request timed out.
  9     *        *        *     Request timed out.
 10     *        *        *     Request timed out.
 11     *        *        *     Request timed out.
 12     *        *        *     Request timed out.
 13     *        *        *     Request timed out.
 14     *        *        *     Request timed out.
 15    74 ms    88 ms    72 ms  w7.scd.yahoo.com [66.218.71.86]
 
 
 
Donnie Leeper
Systems Analyst
MCSE,CCSA
McKinley Capital Management
3301 C St. Suite 500
Anchorage, AK 99503

FAX
[email protected]