[afnog] problem tracing route to google.com

[Tracy Musaza]

Hi Liliane,

Sure You can success to trace without your firewall..  U have to know that windows uses icmp and  some firewall ( based linux ) uses udp. 

use some tool like NSCAN for trace then you will success !

http://nscan.en.softonic.com/download
http://www.brothersoft.com/nscan-download-64231.html?bottom

if any persistence, you can use winsock to rebuild your TCP and fix your problem.

http://www.snapfiles.com/get/winsockxpfix.html
http://majorgeeks.com/WinSock_XP_Fix_d4372.html


EASY and HAPPY HACKING,

CokoTracy
Kgl, RWD



--- En date de : Jeu 11.8.11, Liliane Uwarugira <luwarugira at bk.rw> a écrit :

De: Liliane Uwarugira <luwarugira at bk.rw>
Objet: Re: [afnog] problem tracing route to google.com
À: "'Hugo Lombard'" <hal at elizium.za.net>
Cc: afnog at afnog.org
Date: Jeudi 11 août 2011, 8h52

Hi Hugo, scott and Serge,

Thank you for quick replies. Below is the access-list and the trace route
from my firewall does not reach google.

access-list inside_out extended permit icmp [my net range] any

Regards,
Liliane U.


-----Original Message-----
From: Hugo Lombard [mailto:hal at elizium.za.net] 
Sent: Wednesday, August 10, 2011 7:33 PM
To: Liliane Uwarugira
Cc: afnog at afnog.org
Subject: Re: [afnog] problem tracing route to google.com

On Wed, Aug 10, 2011 at 06:16:09PM +0200, Liliane Uwarugira wrote:
> 
>    Could you kindly help! I have problem on an outside interface (to
>    internet); I can successfully ping goolge, but it's strange on the
>    tracert.
> 
>    Check the scenario :
> 

[...]

>    C:\Users\user>tracert 209.85.148.105
> 

Hi Liliane

Can you successfully traceroute anywhere else?

What rules did you add for allowing tracert?

Seeing that the final hop responds, my first guess would be that your
firewall is not allowing the ICMP Time Exceeded packets (generated from
the TTL expiring along the route) through.

Regards

-- 
Hugo Lombard


_______________________________________________
afnog mailing list
http://afnog.org/mailman/listinfo/afnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://afnog.org/pipermail/afnog/attachments/20110811/0f1f2725/attachment.html>