[H-GEN] traceroute results query

[Ben Fowler]

[ Humbug *General* list - semi-serious discussions about Humbug and  ]
[ Unix-related topics.  Please observe the list's charter.           ]
[ Worthwhile understanding: http://www.humbug.org.au/netiquette.html ]

Quoting Darrin Mison <staeci at yahoo.com>:

> what do the !X 's mean?  I have no idea
>
> 9  Fddi0-0.civ-core1.Canberra.telstra.net 
(139.130.235.226)  39.353 ms 
> 27.> 636 ms  52.583 ms
> 10  * Fddi0-0.civ-core1.Canberra.telstra.net 
(139.130.235.226)  96.773 ms
> !> X *
> 11  * Fddi0-0.civ-core1.Canberra.telstra.net 
(139.130.235.226)  125.702 ms
> > !X *
> 12  Fddi0-0.civ-core1.Canberra.telstra.net 
(139.130.235.226)  170.261 ms
> !X>  *  48.286 ms !X

I've seen this before, trying to ping through BIT's
firewall.  

The traceroute(1) manpage claims that it means
"communication administratively prohibited".  I'd say
someone's written a firewall rule to block ICMP
TIME_EXCEEDED packets.

I wouldn't have a clue on how to set it up under Linux
(netfiler or ip-chains).  Hell, it'd take a whole
5 minutes to research :)  At any rate, it looks like
a pretty sensible security precaution.

-regards, 

Ben.

--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.