On 2018-04-04 07:33, Per Jessen wrote:
Carlos E. R. wrote:
On 2018-04-03 22:37, James Knott wrote:
On 04/03/2018 04:12 PM, Carlos E. R. wrote:
Yes, that is the case.
Now, I wonder what to open on the destination firewall. It responds to pings, so traceroute must be using some other thing. I am reading the man now and I can't see a paragraph that says what exact port they use by default. Only that I can choose one.
It uses UDP. According to Wireshark, it starts at port 33434 and increments with each packet. I don't know how high it goes.
Thus it is impossible to open the firewall to it.
You don't.
From each router on the way to the destination, traceroute will receive an icmp-time-exceeded. From the target host, it will likely receive a icmp-port-unreachable.
Well, traceroute to the 15.0 laptop with firewald works just fine :-) -- Cheers / Saludos, Carlos E. R. (from 42.3 x86_64 "Malachite" at Telcontar)