morenuf <morenufnobodyhome.com.invalid> wrote:
You would need to allow UDP *outbound* for UDP-based traceroute, but you> I am having trouble doing TraceRoute through my router under OSX. After
> months of frustration,finally OSX versions of TraceRoute did arrive that
> allowed choice of UDP (default) or ICMP, and ICMP setting did finally
> allow TraceRoute to work through my router.
> Does a UDP port need to be open in my router configuration to allow UDP
> Traceroute to run correctly under UDP & OSX? What port number is that?
won't need to open anything inbound for UDP.
The actual port number is not defined. The way UDP traceroute works is to
attempt to send datagrams to an unused UDP port; that will be a high port,
but could be pretty much anything, and won't necessarily be the same every
The responses from a UDP traceroute are ICMP error messages (either time
exceeded or port unreachable). That's what you would have to allow back
in through your firewall (despite common misconception, there is no real
reason to block all ICMP at a firewall, and there are good reasons not to).
If an ICMP-based traceroute works, just use that. It won't make any
difference in the diagnostic information you get back from it.
Jeremy | [email]jeremyexit109.com[/email]