Filippo Giunchedi wrote:
On Fri, Feb 11, 2005 at 01:35:40PM +0100, Vincent Fourmond wrote:
I think this is mainly due to the fact that I'm hosted behind an aggressive (and stupid) firewall. I don't know exactly what goes through, but I can tell you this:
UDP doesn't come, whichever the situation;
only outbound TCP connections are allowed;
maybe also traceroute is blocked (i.e. ICMP type different from echo request/reply) and indeed the firewall setup is a little stupid :)
could you try traceroute -v ftp.fr.debian.org ?
traceroute fails:
traceroute to ftp.fr.debian.org (212.27.32.66), 30 hops max, 38 byte packets
1 132.166.55.252 (132.166.55.252) 36 bytes to 132.166.53.137 0.602 ms 0.563 ms 0.537 ms
2 194.254.183.118 (194.254.183.118) 36 bytes to 132.166.53.137 0.593 ms 0.491 ms 0.538 ms
3 192.168.4.1 (192.168.4.1) 36 bytes to 132.166.53.137 0.596 ms 0.497 ms 0.538 ms
4 orsay-a0-2-350.cssi.renater.fr (193.51.183.6) 36 bytes to 132.166.53.137 5.077 ms 3.709 ms 3.542 ms
5 nri-a-pos12-0.cssi.renater.fr (193.51.179.41) 148 bytes to 132.166.53.137 4.692 ms 4.848 ms 4.788 ms
6 nri-b-pos11-0.cssi.renater.fr (193.51.179.10) 36 bytes to 132.166.53.137 4.461 ms 4.099 ms 4.413 ms
7 free-telecom.sfinx.tm.fr (194.68.129.223) 36 bytes to 132.166.53.137 4.467 ms 4.608 ms 4.895 ms
8 p19-6k-2-v806.routers.proxad.net (212.27.50.161) 36 bytes to 132.166.53.137 4.595 ms 4.977 ms 4.786 ms
9 vlq-6k-2-v800.intf.routers.proxad.net (212.27.50.5) 36 bytes to 132.166.53.137 4.738 ms 4.854 ms 4.843 ms
10 vlq-6k-1-po1.intf.routers.proxad.net (212.27.50.2) 36 bytes to 132.166.53.137 5.124 ms 4.963 ms 4.983 ms
11 * * *
(and then it's only * * * until 30...)
Whereas tcptraceroute does give the right stuff:
Tracing the path to ftp.fr.debian.org (212.27.32.66) on TCP port 80, 30 hops max
1 132.166.55.252 (132.166.55.252) 0.574 ms 0.518 ms 0.492 ms
2 194.254.183.118 (194.254.183.118) 0.487 ms 0.515 ms 0.484 ms
3 192.168.4.1 (192.168.4.1) 0.624 ms 0.595 ms 0.503 ms
4 orsay-a0-2-350.cssi.renater.fr (193.51.183.6) 3.877 ms 3.418 ms 5.567 ms
5 nri-a-pos12-0.cssi.renater.fr (193.51.179.41) 4.618 ms 4.403 ms 4.725 ms
6 nri-b-pos11-0.cssi.renater.fr (193.51.179.10) 4.481 ms 4.811 ms 4.874 ms
7 free-telecom.sfinx.tm.fr (194.68.129.223) 5.376 ms 5.320 ms 4.872 ms
8 p19-6k-2-v806.routers.proxad.net (212.27.50.161) 4.878 ms 4.826 ms 4.874 ms
9 vlq-6k-2-v800.intf.routers.proxad.net (212.27.50.5) 5.374 ms 4.820 ms 4.876 ms
10 vlq-6k-1-po1.intf.routers.proxad.net (212.27.50.2) 5.364 ms 4.818 ms 4.953 ms
11 debian.proxad.net (212.27.32.66) [open] 5.454 ms 4.935 ms 4.928 ms
So it does really look like the firewall is stupid (that wouldn't surprise me, the company which is dealing with computers where I work is about as good as my daughter - and she's 6 month old...)
There you are. I hope to have been helpful !
Vincent Fourmond
-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
