At 08:31 02/03/01 -0800, Devin L. Ganger wrote:
>I beg to differ. I've clearly tracerouted *through* private address
>spaces. The trick is that the target of the traceroute can't be the
>private address -- but I'm not so sure I'd want folks to be using my
>routers as the targets of their pings, traceroutes, etc. anyway.
assume my IP address is 10.0.0.1, and that of your router is 10.0.0.1.
I can't send you any message, so I can't traceroute over your router.
If I can traceroute through your router, then I can ping, telnet and the rest.
If I can't, there is no reason my traceroute returns your address.
In other words, you either declare your router to be usable by others
(traceroute,
routing, ..) and thus give it a public address, or make it invisible for
us, and then
using any addresse space you want, as far as I don't see it.
cheers,
mouss
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
