allowing icmp still doesn't allow traceroute

From: Peter C. Lai (sirmoo@cowbert.2y.net)
Date: 02/27/02 

Date: Wed, 27 Feb 2002 17:09:28 -0500
From: "Peter C. Lai" <sirmoo@cowbert.2y.net>
To: freebsd-security@freebsd.org

I have:
00600 allow icmp from any to any

for ipfw, and i still get sendto Permission denied when
I try to traceroute.

I later also explicitly defined icmptypes 0,3,8,11,13
and this does not solve the problem.

any suggestions? 

-- 
Peter C. Lai
University of Connecticut
Dept. of Residential Life | Programmer
Dept. of Molecular and Cell Biology | Undergraduate Research Assistant
http://cowbert.2y.net/
860.427.4542 (Room)
860.486.1899 (Lab)
203.206.3784 (Cellphone)
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: allowing icmp still doesnt allow traceroute
    ... >> 00600 allow icmp from any to any ... >> for ipfw, and i still get sendto Permission denied when ... >> I try to traceroute. ... You want to allow UDP packets in that above range ...
    (FreeBSD-Security)
  • Re: disable traceroute to my host
    ... > is it possible to disable using ipfw so people won't be able to traceroute ... be mentioned that man pages coming with FreeBSD (I guess as well as ... It does send 'time exceeded in-transit' icmp message cause TTL ... answer -- you should disallow it with your ipfw. ...
    (FreeBSD-Security)
  • Re: allowing icmp still doesnt allow traceroute
    ... > 00600 allow icmp from any to any ... > for ipfw, and i still get sendto Permission denied when ... > I later also explicitly defined icmptypes 0,3,8,11,13 ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: Blocked incoming ICMP, getting outgoing ICMP [3] Destination Unreachable
    ... The real LBL traceroute ... icmp error in reponse to an icmp packet. ... icmp time exceeded in response to an icmp echo or echo reply. ... had created a b0rken network stack that could be kicked over by sending ...
    (comp.security.firewalls)
  • Re: ipfw-ntad-jail
    ... > Ok, so I setup IPFW and NATd on my freeBSD 4.5-RELEASE box, ... > host (dagobah) ... > allow ftp (port 21) ... > add 00600 allow icmp from any to any icmptypes 3 ...
    (FreeBSD-Security)