Re: [TCLUG:17580] ICMP Types

["John Hawley" <jhawley@bgea.org>]

I don' know if this applies, but in order to enable traceroute from an
internal stand point, I had to open our firewall to ICMP 'unreachable' as
well as 'time-exceeded'.  Don't know offhand what the port numbers are for
these.

-John

----- Original Message -----
From: "Jeff Lehman" <jeffclehman@mediaone.net>
To: <tclug-list@mn-linux.org>
Sent: Friday, May 12, 2000 11:59 AM
Subject: [TCLUG:17580] ICMP Types


Anyone know which ICMP types traceroute uses so that i can block them out?
I've blocked ttl-exceeded, but that doesn't seem to work. TIA