[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    Re: traceroute and ip_filter
From:       "Alex A. Smirnoff" <ark () convey ! ru>
Date:       1997-09-25 15:27:17
[Download RAW message or body]

nuqneH,

> In some mail I received from Alexander B. Povolotsky, sie wrote
> [...]
> > > IPFilter NAT does not handle traceroute. That's just because incoming
> > > ICMP packets do not match any rule.
> > 
> > Than why ping works? And what/where/how to patch?
> 
> Because traceroute requires two different packet types to work.  The first
> is UDP (which it sends out as the probes) and the second is ICMP error
> messages.  UDP is handled (currently), as is ICMP but not ICMP replies
> for packets sent out which are returning indicating an error.

afaik micro$oft tracert uses ICMP instead of UDP but that does not
work anyways because host address changes when replies are received..


[prev in list] [next in list] [prev in thread] [next in thread]