damox
Premium
join:2002-01-07
Olympia, WA
 ·Comcast Formerly ..
1 edit | reply to RoCJester
Re: Tracert
Well obviously Trace Route can be blocked. It may not have been intentional, but something was causing a problem with my use of Trace Route. As was suggested by "Mr. Anonymous, I did try running a Trace Route from a web site, and I got the same result. Maybe the use of the term "blocked" was too strong a word, but as I stated in my ISP review in March of 2004, after Comcast bought out AT&T cable, I lost my ability to perform a meaningful Trace Route. I stated that I would only get a response from the first two hops and last hop, everything in between timed out. I also stated that even when I connected directly to my cable modem (bypassing my two hardware firewalls/routers), and did so from four different computers, I still got the same result. Something was causing that inability to get a response for the 10 to 16 or so devices in between me and my targets. I don't know if it was the Thompson cable modem that I was renting from Comcast at the time, or it was something in Comcast's configuration of their headend devices, however, it began happening after Comcast took over. It was after I purchased my own Motorola SB5200, that the problem seemed to stop, so I'm not sure if it was a coincidence, or it was something to do with the modem itself. In any case, the problem went away.
As far as being able to block a trace route, right now, I can run a Trace Route and I get a response from my first firewall, but my outside firewall times out because it is configured to do so. After that, of the six or so targets that I tried to trace, I get a response from most devices in between, but on two of the targets (which includes the technical college where I work where the firewall is configured to ignore ICMP requests), when I get to the actual target, it times out until it reaches 30 hops which is the default for the maximum number of hops! The other target that timed out was the NY Times. It is not unusual for organizations to configure their routers or firewalls to ignore ICMP requests.
--
DAMOX Proud to be a member of Team Discovery |
