Re: internode/iinet/tpg ipv4 bogons in route

Damon Permezel via linux-aus <[email protected]> Wed, 15 Jun 2022 13:33:19 +0000

Newsgroups	gmane.linux.australia
Message-ID	<FyPsBoHqYJ3pBScufuhzJvPpBqbaisM6oA3R-_OS8FZQiMPVH4BWF9-EUxOOhF2N9PHlNjOuOr7DnhQe8cJMoASp0rns4-dR2wvvxvjSQQ8=@zepherin.com>

I am sure I'm not blocking the ping at my (UDM Pro) firewall, but the Fritz!box also has a firewall.

Because I see the weird 10.20.21.212 hop outbound, I assumed I would see it on inbound, and thus it appeared to be the next hop to fix.
However, no small amount of dorking about with the Fritz!Box has resulted in me figuring out that I need to designate the UDM as "exposed host".

I know I should have more faith in the Unifi firewall, and I should have been happy to put the UDM into the DMZ, but I always felt marginally less insecure leaving it so that the mystical, inaccessible Fritz!box firewall was also preventing rogue SYNs from molesting my sockets.

Once I enable "Exposed Host" on the Fritz, pings work, and "mtr" is able to reveal to me that there is no 10.20.21.212 hop inbound.  Just outbound.

The bogon hop still annoys me -- perhaps I need to get a life.

Sent with Proton Mail secure email.
------- Original Message -------
On Wednesday, June 15th, 2022 at 15:10, Paul Gear via linux-aus <[email protected]> wrote:

> The existence of that node on the path should not break mtr - it should
> continue trying increased TTLs until it gets to the end node.
> 

> Are you sure you're not blocking ping at your firewall?
> 

> On 15/6/22 14:35, Damon Permezel via linux-aus wrote:
> 

> > Breaks mtr.
> > Im trying to diagnose some issues and the other party insists on mtr
> > working from both sides.
> > Inbound to me the 10.20.21.212 drops all pings and mtr goes no further.
> > The ping is not addressed to 10.20.21.212. It should elicit a ttl
> > expired icmp response.
> > 

> > Thats the main reason this got my attention again.
> 

> _______________________________________________
> linux-aus mailing list
> [email protected]
> http://lists.linux.org.au/mailman/listinfo/linux-aus
> 

> To unsubscribe from this list, send a blank email to
> linux-aus-unsubscribe-cunTk1MwBs8iFSDQTTA3OBCuuivNXqWP@public.gmane.org

_______________________________________________
linux-aus mailing list
[email protected]
http://lists.linux.org.au/mailman/listinfo/linux-aus

To unsubscribe from this list, send a blank email to
linux-aus-unsubscribe-cunTk1MwBs8iFSDQTTA3OBCuuivNXqWP@public.gmane.org

publickey - dap-2nJC94JhJR5Wk0Htik3J/[email protected] - 0x2DD13951.asc (application/pgp-keys, 721 B)

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: OpenPGP.js v4.10.10
Comment: https://openpgpjs.org
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=jm2d
-----END PGP PUBLIC KEY BLOCK-----

signature.asc (application/pgp-signature, 249 B)