From owner-freebsd-questions Thu Mar 8 22:59: 7 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mailhost01.reflexnet.net (mailhost01.reflexnet.net [64.6.192.82]) by hub.freebsd.org (Postfix) with ESMTP id B1A9A37B718 for ; Thu, 8 Mar 2001 22:59:04 -0800 (PST) (envelope-from cjc@rfx-216-196-73-168.users.reflexcom.com) Received: from rfx-216-196-73-168.users.reflexcom.com ([216.196.73.168]) by mailhost01.reflexnet.net with Microsoft SMTPSVC(5.5.1877.197.19); Thu, 8 Mar 2001 22:57:05 -0800 Received: (from cjc@localhost) by rfx-216-196-73-168.users.reflexcom.com (8.11.1/8.11.1) id f296wtM42117; Thu, 8 Mar 2001 22:58:55 -0800 (PST) (envelope-from cjc) Date: Thu, 8 Mar 2001 22:58:55 -0800 From: "Crist J. Clark" To: Dan Larsson Cc: FreeBSD Questions List Subject: Re: Strange traceroute issue Message-ID: <20010308225855.T1367@cjc-desktop.users.reflexcom.com> Reply-To: cjclark@alum.mit.edu References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from dl@tyfon.net on Thu, Mar 08, 2001 at 07:24:52PM +0100 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, Mar 08, 2001 at 07:24:52PM +0100, Dan Larsson wrote: > We have setup a firewall so that traceroutes can > be done from hosts on the inside. This works perfect > for all Microsoft based clients (WinNT) but failes > for all FreeBSD clients. What could I be missing here? Windows and UNIX-type OSes do traceroute (or tracert) differently. > This is the fwrule: > ${fwcmd} add pass udp from any to any 33434-33523 out via ${oif} Do you have a corresponding rule to let UDP pass the inner interface? If you do a tcpdump on the external interface, do you see the UDP going out? -- Crist J. Clark cjclark@alum.mit.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message