[afnog] problem tracing route to google.com

[Tracy Musaza]

Hi Franck and Liliane,

some ISPs block incoming ICMP packet for security reason, in this case you need to trace , just use some tools like NSCAN...  

Liliane,  try and let us know okey !!

I work on many kind of Firewall based Linux and some time I meet this problem, especially when using old untangle, IPCOP and others. but u can turn on incoming icmp packet, but it's not a good idea.

Happy Hacking

CokoTracy
Kgl, RWD

--- En date de : Jeu 11.8.11, Frank Habicht <geier at geier.ne.tz> a écrit :

De: Frank Habicht <geier at geier.ne.tz>
Objet: Re: [afnog] problem tracing route to google.com
À: "Liliane Uwarugira" <luwarugira at bk.rw>
Cc: afnog at afnog.org
Date: Jeudi 11 août 2011, 9h48

Hi,

On 8/11/2011 9:52 AM, Liliane Uwarugira wrote:
> Hi Hugo, scott and Serge,
> 
> Thank you for quick replies. Below is the access-list and the trace route
> from my firewall does not reach google.
> 
> access-list inside_out extended permit icmp [my net range] any
> 
> Regards,
> Liliane U.


this allows the packets to go out (towards google), right?
what about the icmp packets that want to come back?

Frank


_______________________________________________
afnog mailing list
http://afnog.org/mailman/listinfo/afnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://afnog.org/pipermail/afnog/attachments/20110811/e87854ec/attachment.html>