From owner-freebsd-questions@FreeBSD.ORG Thu Nov 4 15:58:35 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2784016A4CE for ; Thu, 4 Nov 2004 15:58:35 +0000 (GMT) Received: from ns1.tiadon.com (SMTP.tiadon.com [69.27.132.161]) by mx1.FreeBSD.org (Postfix) with ESMTP id B34B343D54 for ; Thu, 4 Nov 2004 15:58:34 +0000 (GMT) (envelope-from kdk@daleco.biz) Received: from [69.27.131.0] ([69.27.131.0]) by ns1.tiadon.com with Microsoft SMTPSVC(6.0.3790.211); Thu, 4 Nov 2004 10:02:06 -0600 Message-ID: <418A51A4.7080603@daleco.biz> Date: Thu, 04 Nov 2004 09:58:28 -0600 From: "Kevin D. Kinsey, DaleCo, S.P." User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.2) Gecko/20041023 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Kenneth W Cochran References: <200411041400.JAA449229@shell.TheWorld.com> In-Reply-To: <200411041400.JAA449229@shell.TheWorld.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 04 Nov 2004 16:02:08.0274 (UTC) FILETIME=[A2E88F20:01C4C287] cc: freebsd-questions@freebsd.org Subject: Re: traceroute: sendto: Permission denied (4.10-RELEASE) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Nov 2004 15:58:35 -0000 Kenneth W Cochran wrote: >Hello -questions: > >Lately (since a few days ago) I've been getting an oddity from >traceroute, for example: >-------------------- >traceroute to www.freebsd.org (216.136.204.117), 64 hops max, 44 byte packets >traceroute: sendto: Permission denied > 1 traceroute: wrote www.freebsd.org 44 chars, ret=-1 > *traceroute: sendto: Permission denied >traceroute: wrote www.freebsd.org 44 chars, ret=-1 > * 10.108.0.1 (10.108.0.1) 7.212 ms > >[other hops that look just fine] > >13 www.freebsd.org (216.136.204.117) 94.209 ms 87.449 ms 89.103 ms >-------------------- > >OS is 4.10-RELEASE, built from source acquired via cvsup. >I get that "Permission denied" at the beginning regardless of >where I might try tracing "outside" (external interface - dc0) >e.g. it works just fine to my local net (local interface - dc1). >Up until a few days ago, traceroute "worked fine" and never (as >far as I recall) reported such a message. > >Btw, that 10.108.0.1 hop has been there for ages, and while I >think it's "unusual" it has been there for ages & hasn't >previously affected traces. > >The difference between previous & now is that "traceroute: >sendto: Permission denied" message > >What does that mean? What is traceroute trying to do? >I tried the "tracert" from a local (NATed) Win2k machine & that >seems to work as it always has. {shrug} > >Any idea(s) what's (not) happening? >Is my upstream connection blocking something (again)? >Is there some kind of workaround/fix (perhaps my firewall config)? > >Thanks, > >-kc > > In my limited experience, this is almost certainly a misconfiguration of the firewall ... (assuming, of course, that you wish the firewall to permit the use of traceroute....) KDK