Does it pass or fail from downstream routers? Traffic originating from
your router will use the exit interface's IP as the source address in
the ICMP packets. Since it's your edge, that'd be your upstream's
address space (I'm guessing they gave you one side of a /30). So try
setting the source address for the traceroute to that router's loopback
address (that's hopefully in your address space) and see what you get.
It's entirely possible that they've blocked your entire prefix. Or if
you're doing BGP, maybe your announcement isn't making it to them (or
their upstream(s)).
On 9/7/2016 9:56 PM, David Milholen wrote:
Ok,
I have an ip for a website that cannot be reached by our clients.
At first I checked DNS behavior and the nslookups are fine.
So, I started checking all of our ip blacklists and nothing showed up.
I then started some trace routes and from a host computer it will not
complete but from an edge router using ping tool in the mikrotik I was
able to ping the site
and do a complete traceroute.
At this point I am thinking a firewall issue but after disabling every
rule still nothing from the host and this is from different host on
different sites that cannot access this site.
SO now im stuck.. Why can an edge see this site but nothing else
beyond the edge can???
IM LIKE WUT DA WUT!
Thanks
Dazed and confused LOL
--
