Re: ICMP and Traceroute

["Ryan Russell" <Ryan.Russell () sybase com>]

Can they hop on the access router (outside the
firewall) and do their pings and traceroutes from there?

                    Ryan








Two more questions that came from the same group who need access to dns
outbound.  They would like to be able to ping and traceroute external
hosts from all the clients.

We currently do not allow icmp and traceroute packets in or out bound.  We
block all those at the router level.  The group is responsible for
client network and security design and they would like ping and
traceroute for troubleshooting networks.

Thanks
- Deepak