Re: 4or6.con question

[Alexandru Suciu via NANOG <nanog () nanog org>]

If its a linux box and most likely it is....and depending on the number of
hops from 4or6.com to your target machine it is possible that the probes
reach you with higher port number the the ones you allowed.

For example this is what I get when I trace to google which is 10 hops
away. Probes that make it to 8.8.8.8 are 33462 and higher:

13:31:51.822851 IP 8.8.8.8 > 10.83.13.12: ICMP 8.8.8.8 udp port 33462
unreachable, length 68
13:31:51.822914 IP 8.8.8.8 > 10.83.13.12: ICMP 8.8.8.8 udp port 33461
unreachable, length 68
--------
13:31:51.825698 IP 8.8.8.8 > 10.83.13.12: ICMP 8.8.8.8 udp port 33472
unreachable, length 68
13:31:51.828361 IP 8.8.8.8 > 10.83.13.12: ICMP 8.8.8.8 udp port 33473
unreachable, length 68
13:31:51.828375 IP 8.8.8.8 > 10.83.13.12: ICMP 8.8.8.8 udp port 33474
unreachable, length 68

Try and allow allow ports till 40k for the duration of the test and see if
there is any change.
Also might be worth to try a ICMP test, get the source IP and then permit
all traffic for that IP and check if tht helps.

Are you behind NAT? Maybe the probes stop at the router that is doing the
NAT.
Lastly, does the traceroute make it anywhere near you, like the subnet your
public IP is in? Does it fail on the last hop(your machine) or does it fail
somewhere in the middle?



On Wed, Mar 15, 2017 at 3:25 PM, jimmy keffer <horsezip () earthlink net>
wrote:

> does anyone know what ports 4or6.com uses for udp traceroute its failing
> on my windows firewall i opened 33434-33464 udp but no help i goggled
> but can't find
> jimmy



-- 

<http://t.sidekickopen06.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJW7t5XYg7fKbwdW3M2q-65v_YVxW643TLH56dGkDdvPMNP02?t=http%3A%2F%2Fwww.arista.com%2F&si=6319566969110528&pi=ac752613-cb17-47a3-cc75-a83c7b19afc2>

Software Driven Cloud Networking
<http://t.sidekickopen06.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJW7t5XYg7fKbwdW3M2q-65v_YVxW643TLH56dGkDdvPMNP02?t=https%3A%2F%2Fwww.youtube.com%2Fuser%2FAristaNetworks&si=6319566969110528&pi=ac752613-cb17-47a3-cc75-a83c7b19afc2>
<http://t.sidekickopen06.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJW7t5XYg7fKbwdW3M2q-65v_YVxW643TLH56dGkDdvPMNP02?t=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Farista-networks-inc&si=6319566969110528&pi=ac752613-cb17-47a3-cc75-a83c7b19afc2>
<http://t.sidekickopen06.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJW7t5XYg7fKbwdW3M2q-65v_YVxW643TLH56dGkDdvPMNP02?t=https%3A%2F%2Ftwitter.com%2Faristanetworks&si=6319566969110528&pi=ac752613-cb17-47a3-cc75-a83c7b19afc2>
<https://www.facebook.com/AristaNW/>

Alexandru Suciu
Technical Solutions Engineer - EMEA
e. asuciu () arista com
m.  +1 866-476-0000
*www.arista.com* <http://www.arista.com/>

<https://events.arista.com/cloud-builders-emea-2017-q1>