--On 01/09/2002 9:38 AM +1100 Martin wrote: } there is something wrong with that host. } } have a look at line 11, you have already traced to the host but the } traceroute doesn't stop. i would say they are filtering IP packets, probably } ICMP as well. }
OK, since we're comparing traceroute results... :-) This one's from a FreeBSD 3.x system. I cut out the hops before UUNET: traceroute to 205.229.56.205 (205.229.56.205): 1-30 hops, 38 byte packets [...] 4 500.Serial2-2.GW3.PAO1.ALTER.NET (157.130.190.5) 22.2 ms 19.5 ms 18.3 ms 5 506.ATM3-0.XR1.PAO1.ALTER.NET (152.63.53.82) 20.1 ms 18.3 ms 16.2 ms 6 189.at-1-1-0.TR1.SAC1.ALTER.NET (152.63.50.94) 23.9 ms (ttl=249!) 23.1 ms (ttl=249!) 23.0 ms (ttl=249!) 7 127.at-6-3-0.TR1.NYC8.ALTER.NET (152.63.5.233) 107 ms (ttl=248!) 105 ms (ttl=248!) 105 ms (ttl=248!) 8 185.at-1-0-0.XR1.NYC8.ALTER.NET (152.63.19.185) 106 ms (ttl=247!) 106 ms (ttl=247!) 104 ms (ttl=247!) 9 183.ATM6-0.GW1.NYC8.ALTER.NET (152.63.18.137) 97.6 ms 97.1 ms 96.9 ms 10 circle-gw.customer.alter.net (157.130.49.6) 104 ms (ttl=240!) 101 ms (ttl=240!) 101 ms (ttl=240!) 11 192.216.122.214 (192.216.122.214) 106 ms (ttl=239!) * 103 ms (ttl=239!) 12 205.229.56.205 (205.229.56.205) 110 ms (ttl=238!) !A 112 ms (ttl=238!) !A 110 ms (ttl=238!) !A So from that machine, I get a nice, clean "Administratively Prohibited" return at the machine's IP address. The variations make it kind of hard to know what's actually happening. I wonder if we're seeing differences in what kind of ICMP replies are actually making it back to traceroute. Jim -- Jim Watt [EMAIL PROTECTED] Applied Biosystems Voice (desk): +1 408 577 2228 3833 North First Street Fax: +1 408 894 9307 San Jose CA 95134-1701 Voice (main): +1 408 577 2200 _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
