Hi,

I am on a 64 bit OpenBSD 4.8 stable.

Here is mine

on OpenBSD 4.8 firewall/router

# both traceroute www.google.lk and traceroute -I www.google.lk work.


>From my fedora client,

traceroute www.google.lk works.

and

traceroute -I www.google.lk also works. But second hope gives in this way

*2  * * **

and the rest is fine.


I have added these 2 rules in pf.conf file

#For traceroute
pass in log (all) on $int_if inet proto udp from $admin_pc to !$int_if \
  port 33433 >< 33626 keep state

# Allow trace route
pass out on $ext_if inet proto udp from any to any port 33433 >< 33626 keep
state

Reply via email to