tech-net: How do I traceroute through ipf?

Subject: How do I traceroute through ipf?
To: tech-net@netbsd.org <tech-net@netbsd.org>
From: David Laight <david@nohope.l8s.co.uk>
List: tech-net
Date: 01/16/2002 22:43:25

My attempts to traceroute get stomped by my ipf configuration:

% traceroute www.dilbert.com

Jan 16 22:35:24 snowdrop ipmon[108]: 22:35:24.160418             ppp0
@150:4 b 213.122.108.22,33099 -> 65.114.4.69,33435 PR udp len 20 10240 
OUT 

Unfortunately this seems to be a udp packet from a random port to a
random port - and I don't want the filters open that far.  I presume the
destination port is really irrelevant and maybe port 9 (discard) would
be more appropriate?

	David