> [EMAIL PROTECTED] wrote:
> 
> Hey, Group.
> 
> In my production network, I'm trying to do some extended traces and pings with the 
> record option turned on to see what route my packets take going and returning.  It's 
> not working.  If I do the extended traceroute or ping without the record option, it 
> works fine.  There is a firewall (PIX) a few hops in front of the destination I'm 
> trying to record the route for.  What part of ICMP is this that needs to be opened 
> on the firewall to allow this to come back?  First time I'm coming across this.

It's not ICMP. It's the IP Options. Most firewalls will drop any
packet with an IP Options. Many firewalls will not let you turn this off.
I do not know how to allow IP Options through a PIX, but I know how to
do it in Cisco IOS.
-- 
Crist J. Clark                               [EMAIL PROTECTED]
Globalstar Communications                                (408) 933-4387

Reply via email to