Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 Mar 2003 07:47:07 -0500
From:      Bill Moran <wmoran@potentialtech.com>
To:        ai1@mtaonline.net
Cc:        freebsd-questions <questions@freebsd.org>
Subject:   Re: where packets are dropped in route
Message-ID:  <3E7866CB.5060104@potentialtech.com>
In-Reply-To: <200303191011.h2JABJ0B038650@en26.ai1.anchorage.mtaonline.net>
References:  <200303191011.h2JABJ0B038650@en26.ai1.anchorage.mtaonline.net>

next in thread | previous in thread | raw e-mail | index | archive | help
ai1@mtaonline.net wrote:
> is there any way to determine which machine along
> a route is dropping packets destined for a specific
> IP/port combination?
> 
> i can't SSH to my gateway from machines elsewhere
> on the internet, but i can ssh to it on a local net.
> 
> i can ssh to other machines elsewhere on the internet
> from the local gateway / local net.
> 
> i have no firewall rules blocking any traffic.
> i have the same configuration that i used with
> a previous ISP - where all worked fine
> (except for ppp login mods).
> 
> my current ISP claims not to be blocking any traffic.
> i think he is wrong, and would like to identify
> exactly what machine is dropping the packets
> destined for port 22 on my gateway.

traceroute will allow you to specify a port/proto instead of
using ICMP.
Other tools might be helpful as well.  Use nmap (in ports) to
see if packets are being denied or simply dropped.  You could
use traceroute in combination with nmap and simply test each
host along the path.
Check sockstat on the ssh server and make sure it's acutally
binding to the proper IP as well.

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E7866CB.5060104>