Re: traceroute & ping fail

2000-10-02 Thread John L . Fjellstad
On Sun, Oct 01, 2000 at 04:04:36PM -0500, William Jensen wrote: > An update to myself...in case others are having this problem: > > I added the following rule to my script: > > $IPT -A INPUT -p icmp --icmp-type 0 -j ACCEPT > > My understanding is now the box will accpet 'echo replies' that I wou

Re: traceroute & ping fail

2000-10-01 Thread George Bonser
On Sun, 1 Oct 2000, William Jensen wrote: > Another update to myself and others that may want this information: > > This update concerns traceroute. If I added the following rules I can now > traceroute to anywhere, but traceroutes to me fail: > > $IPT -A INPUT -p icmp --icmp-type time-excee

Re: traceroute & ping fail

2000-10-01 Thread William Jensen
Another update to myself and others that may want this information: This update concerns traceroute. If I added the following rules I can now traceroute to anywhere, but traceroutes to me fail: $IPT -A INPUT -p icmp --icmp-type time-exceeded -j ACCEPT $IPT -A INPUT -p icmp --icmp-type port-unrea

Re: traceroute & ping fail

2000-10-01 Thread William Jensen
An update to myself...in case others are having this problem: I added the following rule to my script: $IPT -A INPUT -p icmp --icmp-type 0 -j ACCEPT My understanding is now the box will accpet 'echo replies' that I would generate by 'ping debian.org'. I then went to another pc on the net and tr