Re: iptables ping and traceroute issues...

Jeffrey Hood <jhood@hmcon.com> wrote in message news:<a%WQa.9437$EZ5.3224512@news1.epix.net>...
> I have put the following in my iptables script, and outgoing pings are fine,
> outgoing traceroutes from the firewall are fine, but incoming pings and
> traceroutes don't work at all, and outbound traceroutes from internal boxes
> have * * * on the first line, take forever, but finally go through...

I am not sure what you have for the rest of your script, but remember
that you will need 'back traffic' rules if you are not using
connection tracking. i.e -
ping request coming in MUST be able to get back out to respond. Also,
your internal boxes are SOL unless you have FORWARD rules for ICMP as
well.

You may want to try a GUI like fBuilder to help you out on this. You
can get it at Freshmeat.net. I use it and it does everything I need.

Good luck,
SlapShot

He shoots, he scores!