I've never seen a packet bounce between routers due to a filter.  As a
matter-o-fact, even if the host was down the router shouldn't pass the
packet back.  In most cases a router only passes a packet back when it
doesn't know how to get to the network the host is on and the router has a
default gateway pointing back to the router that sent the packet to him.

Just to make sure I'm right, I asked one of our CCIE routing bubbas and he
basically agreed with me.  I may only have a CCNA but I know my routing.

David Ishmael, CCNA, IVCP
Senior Network Management Engineer
Windward Consulting Group, Inc.
Phone: (703) 283-7564
Pager: (888) 910-7094
eFax: (425) 969-4707
Fax: (703) 351-9428
mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]






-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of David Lang
Sent: Thursday, February 15, 2001 1:32 PM
To: David Ishmael
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: RE:


this type of traceroute can also result from a router that blocks the
traceroute packets. if this is the case you can still get to the machine
even though traceroute never finishes.

David Lang

 On Thu, 15 Feb 2001, David Ishmael
wrote:

> Date: Thu, 15 Feb 2001 11:02:11 -0500
> From: David Ishmael <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED], [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED], [EMAIL PROTECTED],
>      [EMAIL PROTECTED]
> Subject: RE:
>
> hahahaha, routing loop.  Courtesy call the ISP and let em know they
screwed
> up a route between 211.103.56.1 and 211.103.56.2.  I always love seeing
> stuff like that...job security.
>
> David Ishmael, CCNA, IVCP
> Senior Network Management Engineer
> Windward Consulting Group, Inc.
> Phone: (703) 283-7564
> Pager: (888) 910-7094
> eFax: (425) 969-4707
> Fax: (703) 351-9428
> mailto:[EMAIL PROTECTED]
> mailto:[EMAIL PROTECTED]
>
>
>
>
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of
> [EMAIL PROTECTED]
> Sent: Wednesday, February 14, 2001 12:44 PM
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED];
> [EMAIL PROTECTED]
> Subject:
>
>
> I recently ran a tracert on a IP that had been scanning some of the
systems
> I am
> responsible for and received some strange results.
> I was wondering if any of you could shed some light on this Issue.
>
> -------------------------------------------------------------------------
> From a Windows system:
> Tracing route to 211.103.59.95 over a maximum of 30 hops
>   1   ...
>   2   ...
>   3   ...
>   4   ...
>   5   ...
>   6   ...
>   7   ....
>   8   <10 ms   <10 ms   <10 ms  195.at-0-0-0.TR1.DCA8.ALTER.NET
> [152.63.32.158]
>   9    63 ms    94 ms    78 ms  115.at-6-1-0.TR3.SCL1.ALTER.NET
> [152.63.3.194]
>  10   78 ms    78 ms    78 ms  399.ATM6-0.XR1.PAO1.ALTER.NET
[152.63.48.217]
>  11   63 ms    78 ms    78 ms  189.ATM5-0.GW7.PAO1.ALTER.NET
[152.63.49.153]
>  12   62 ms    78 ms    94 ms  hkt-gw2.customer.ALTER.NET
[157.130.197.190]
>  13   63 ms    79 ms    93 ms  g1-0.paix04.hkt.net [202.84.128.172]
>  14  1313 ms  1297 ms  1296 ms  p5-0.yckbr03.hkt.net [202.84.128.221]
>  15  1266 ms  1297 ms  1265 ms  202.84.140.1
>  16  1265 ms  1282 ms  1265 ms  pos7-0.tmhstcbr01.hkt.net [207.176.97.129]
>  17  1266 ms  1265 ms  1344 ms  207.176.96.68
>  18  1359 ms  1359 ms  1375 ms  207.176.98.38
>  19  1485 ms  1375 ms  1375 ms  211.103.6.146
>  20  1391 ms  1375 ms  1421 ms  211.103.56.2
>  21  1375 ms  1375 ms  1360 ms  211.103.56.1
>  22  1360 ms  1390 ms  1344 ms  211.103.56.2
>  23  1328 ms  1328 ms  1375 ms  211.103.56.1
>  24  1406 ms  1407 ms  1406 ms  211.103.56.2
>  25  1422 ms  1453 ms  1484 ms  211.103.56.1
>  26  1312 ms  1281 ms  1219 ms  211.103.56.2
>  27  1157 ms  1140 ms  1141 ms  211.103.56.1
>  28  1141 ms  1125 ms  1109 ms  211.103.56.2
>  29  1125 ms  1125 ms  1110 ms  211.103.56.1
>  30  1203 ms  1188 ms  1187 ms  211.103.56.2
>
> --------------------------------------------------------------------------
--
> ----------
> Brett J. Carpenter
>
>
>
> ---------------------------------------------
> This message was sent using Voicenet WebMail.
>       http://www.voicenet.com/webmail/
>
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to