[NBLUG/talk] I think I broke my ping!

[error]

On Tue, 2003-09-30 at 13:16, Dave Sisley wrote:
> I'm trying to set up IP masquerading as per the HOW-TOs Kyle suggested 
> (excellent doc, by the way), and setting it up requires the use of ping for 
> testing.
> 
> I noticed awhile ago (i.e. before I played with the firewall) that I couldn't 
> ping outside addresses like sonic.net or yahoo.com.  I'm able to get out onto 
> the net with my browser or ssh or ftp, so it's not a connection problem.  
> Also, I am able to self-ping (ping the machine's network IP address) and ping 
> the network IP address of the other machine.
> 
> I just can't ping outside my home network.  Anybody know why?

66.81.159.8 is your home IP yes?

As far as I can tell it's dropping both ICMP and TCP pings.

I would  assume that if you cannot ping your router (both it's inside
and WAN side ip) it is almost certainly dropping ICMP and tcp
connections that aren't in it's state table.

That's actually not such a bad thing as you look like you aren't really
online. There is the possibility that you aren't at this moment, but I
wager that it's your ip for a few more moments.

Three examples using tcptraceroute, traceroute and nmap from Germany:
 tcptraceroute 66.81.159.8
Selected device eth0, address 192.168.2.101, port 33785 for outgoing
packets
Tracing the path to 66.81.159.8 on TCP port 80, 30 hops max
 1  192.168.2.1 (192.168.2.1)  6.273 ms  3.274 ms  1.755 ms
 2  217.5.98.176 (217.5.98.176)  62.063 ms  60.152 ms  48.544 ms
 3  217.237.157.118 (217.237.157.118)  59.922 ms  58.444 ms  49.920 ms
 4  WAS-E4.WAS.US.NET.DTAG.DE (62.154.14.134)  149.997 ms  159.350 ms 
150.637 ms
 5  so-4-2-2.mpr1.iad10.us.above.net (64.125.12.73)  149.277 ms  149.795
ms  150.624 ms
 6  so-4-0-0.mpr1.iad2.us.above.net (64.125.30.118)  158.829 ms  147.056
ms  149.931 ms
 7  so-4-0-0.cr2.iad1.us.above.net (209.249.0.133)  159.991 ms  149.412
ms  149.974 ms
 8  so-1-0-0.cr2.dca2.us.above.net (208.184.233.129)  149.893 ms 
158.134 ms  149.930 ms
 9  so-6-3-0.mpr4.sjc2.us.above.net (64.125.30.166)  229.940 ms  228.477
ms  218.875 ms
10  so-0-0-0.er10a.sjc2.us.above.net (64.125.30.94)  230.573 ms  231.458
ms  227.901 ms
11  64.124.229.117.o1.com (64.124.229.117)  229.905 ms  229.455 ms 
219.949 ms
12  * * *
13  * * *
14  * * *

 traceroute 66.81.159.8
traceroute to 66.81.159.8 (66.81.159.8), 30 hops max, 38 byte packets
 1  192.168.2.1 (192.168.2.1)  2.996 ms  3.166 ms  5.402 ms
 2  217.5.98.176 (217.5.98.176)  58.066 ms  176.853 ms  89.978 ms
 3  217.237.157.118 (217.237.157.118)  59.339 ms  49.423 ms  58.922 ms
 4  WAS-E4.WAS.US.NET.DTAG.DE (62.154.14.134)  149.992 ms  161.455 ms 
148.287 ms
 5  so-4-2-2.mpr1.iad10.us.above.net (64.125.12.73)  158.577 ms  149.723
ms  149.934 ms
 6  so-4-0-0.mpr1.iad2.us.above.net (64.125.30.118)  149.958 ms  158.447
ms  151.292 ms
 7  so-4-0-0.cr2.iad1.us.above.net (209.249.0.133)  150.291 ms  149.798
ms  156.902 ms
 8  so-1-0-0.cr2.dca2.us.above.net (208.184.233.129)  152.978 ms 
151.533 ms  148.216 ms
 9  so-6-3-0.mpr4.sjc2.us.above.net (64.125.30.166)  229.942 ms  234.900
ms  224.842 ms
10  so-0-0-0.er10a.sjc2.us.above.net (64.125.30.94)  233.178 ms  229.156
ms  229.918 ms
11  64.124.229.117.o1.com (64.124.229.117)  236.206 ms  220.150 ms 
229.916 ms
12  * * *

nmap -PT0,65535,80 -PP -PU53 -PE -O -v 66.81.159.8 returns:

Starting nmap 3.45 ( http://www.insecure.org/nmap/ ) at 2003-09-30 17:18
CEST
Host 66.81.159.8 appears to be down, skipping it.
Note: Host seems down. If it is really up, but blocking our ping probes,
try -P0
Nmap run completed -- 1 IP address (0 hosts up) scanned in 12.193
seconds

Just for giggles, I also sent various other icmp packets with different
codes at your box and I didn't get a reply.

Looking at your other posts to the list, your IP isn't static and thus,
you may have just changed ip addresses during this time.

Hope this helps either way.

-- 
error <error at sonic.net>