-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Antony Stone wrote: > Tell us how you handle NEW packets leaving the machine. Well, I just realized by looking at your reply that I only have set: $IPTABLES -A OUTPUT -p ICMP --icmp-type echo-request -j ACCEPT Which of the icmp-type displayed "iptables -p icmp -h" do I need to make traceroute work? By looking at other posts in this thread I've learned that traceroutes are done with echo-requests. Is this true for Linux 2.6.6 ? Thanks, Florian ............................... Someone on the net said: G'Kar: 2 hours ago my government declared war on the Centari Republic -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFA40BiwT2gPfZm6tURAkaLAJ4zRVtBrVbhxVgcPuCs/ZiGVvX1TACdGJOU eKewKcpjQbMlyTtm9omcJZ8= =qjuX -----END PGP SIGNATURE-----