traceroute + Udp?

dunkyb · 02-18-2003, 10:11 AM

Hey

for some reason, whilst my firewall iptables script is in place, the last hop on traceroutes to my box (IE, my box) shows up as * * *

I tried allowing all icmp though, thinking that was the problem, but it wasn't... tried allowing all UDP stuff through, then i could traceroute my box.

So, what extra UDP ports/packets should I allow through my firewall, for a router box?

Cheers

Duncan

unSpawn · 02-18-2003, 01:12 PM

TRACEROUTE_SRC_PORTS="32769:65535"
TRACEROUTE_DEST_PORTS="33434:33523"

//Not that it would matter in this case, but if you would want a workaround, there's a tool around called "tcptraceroute" which obviously doesn't need UDP. Also nice is paratrace which utilizes *existing* connections to piggyback on...