Traceroute operates on udp/33434 and up, each subsequent packet is addressed
to an incremented port number allowing traceroute to keep track of the
in/out icmp packets.

So open a range of udp ports starting at 33434 to whatever port you feel
like. (33434 to 33523)

Alan

-----Original Message-----
From: Andy Chandler [mailto:andy at dynamictelecard dot com] 
Sent: Monday, June 14, 2004 12:43 PM
To: m0n0wall at lists dot m0n0 dot ch
Subject: [m0n0wall] Traceroute to FW from WAN

Hi all --

I am able to ping the WAN interface by adding an "allow IMCP" rule, but it
does not respond to traceroutes.  What config do I need to make that work?

Thanks,
Andy


---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch