From owner-freebsd-questions@FreeBSD.ORG Sat Apr 10 07:03:47 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BE93316A4CF for ; Sat, 10 Apr 2004 07:03:47 -0700 (PDT) Received: from lakermmtao12.cox.net (lakermmtao12.cox.net [68.230.240.27]) by mx1.FreeBSD.org (Postfix) with ESMTP id 20DCA43D45 for ; Sat, 10 Apr 2004 07:03:47 -0700 (PDT) (envelope-from bob89@bobj.org) Received: from mail.bobj.org ([24.250.236.214]) by lakermmtao12.cox.net (InterMail vM.6.01.03.02 201-2131-111-104-20040324) with ESMTP id <20040410140346.IELY1499.lakermmtao12.cox.net@mail.bobj.org> for ; Sat, 10 Apr 2004 10:03:46 -0400 Received: from bobj.wb4jcm.org ([192.168.132.167]) by neti.bobj.org with esmtp; Sat, 10 Apr 2004 10:03:44 -0400 From: Bob Johnson To: freebsd-questions@freebsd.org Date: Sat, 10 Apr 2004 10:03:42 -0400 User-Agent: KMail/1.6 References: <000001c41e39$c271bee0$3500a8c0@junior> In-Reply-To: <000001c41e39$c271bee0$3500a8c0@junior> X-Source-System: Bob's Laptop MIME-Version: 1.0 Content-Disposition: inline Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <200404101003.42987.bob89@bobj.org> cc: Jeff Coleman Subject: Re: Traceroute issue X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Apr 2004 14:03:47 -0000 On Friday 09 April 2004 09:51 am, Jeff Coleman <"Jeff Coleman" > wrote: > I am a new user of BSD and have set up a machine to learn on, > I have version 5.2 on it and it cannot traceroute out. none of the > hops resolve > Pings work fine, and nslookup does as well. > In my experience, this is usually caused by a firewall that blocks either the traceroute packets, or the replies to them. For traceroute to work correctly, you must be able to receive ICMP TIME EXCEEDED and ICMP PORT UNREACHABLE packets, and the target system must reject (rather than accept or silently drop) the query packet that reaches it. You must also be able to send UDP packets to arbitrary ports. If you are not seeing anything at all along a multi-hop path, I suspect that you have a firewall blocking incoming ICMP TIME EXCEEDED packets, but there are many other possibilities. If you are running a firewall on your system (e.g. IPFW), then try turning it off and doing a traceroute. BSD ping uses ICMP ECHO REQUEST and ECHO RESPONSE packets, so if it is working then at least some ICMP packets are getting through. - Bob