Asked by Geraldo Leinardi

Q. (i) My ISP blocks ICMP ECHO request, I can not use traceroute command, is there any way I can send traceroute using port forwarding or something like that?

(ii) What is suggested Personal Firewalls policy for home user?

A.tcptraceroute command can bypass the most common firewall filters.

Basically traceroute sends out either UDP (ports 33434 to 33523) or ICMP ECHO packets with a TTL of one, and increments the TTL until the destination has been reached. However many ISP/WSP (web hosting service providers) blocks certain UDP (even TCP) and ICMP ports for security reasons. Use tcptraceroute command to bypass the most common firewall filters. It is a traceroute implementation using TCP packets.

Task: Install tcptraceroute

You can install tcptraceroute with apt-get command:
# apt-get install tcptraceroute

tcptraceroute Examples

$ traceroute
And now try tcptraceroute:
$ tcptraceroute

For real life example try:
$ traceroute
$ tcptraceroute

Default Personal Firewalls policy for home user

Full or limited Outgoing traffic:
Internet Allow full outgoing traffic or limit outgoing traffic to:

  • Web service (http/https)
  • DNS Email to ISP mail server
  • FTP to ftp server anywhere
  • SSH to ssh server anywhere
  • VPN client to corporate VPN

No Incoming traffic:

Internet -> Router -> You

No incoming traffic. To be frank it is very simple to setup such firewall, just look at our previous firewall example. This is suggested policy that allows you to browse the Internet, download files via FTP, ssh to remote server or use VPN client to connects to corporate network. You do not have to run special services like an sshd server or an ftp server on your home desktop computer.

Download tcptraceroute

You can download tcptraceroute here.

🐧 Get the latest tutorials on Linux, Open Source & DevOps via RSS feed or Weekly email newsletter.

🐧 2 comments so far... add one

CategoryList of Unix and Linux commands
Disk space analyzersdf duf ncdu pydf
File Managementcat cp mkdir tree
FirewallAlpine Awall CentOS 8 OpenSUSE RHEL 8 Ubuntu 16.04 Ubuntu 18.04 Ubuntu 20.04
Modern utilitiesbat exa
Network UtilitiesNetHogs dig host ip nmap
OpenVPNCentOS 7 CentOS 8 Debian 10 Debian 8/9 Ubuntu 18.04 Ubuntu 20.04
Package Managerapk apt
Processes Managementbg chroot cron disown fg glances gtop jobs killall kill pidof pstree pwdx time vtop
Searchingag grep whereis which
User Informationgroups id lastcomm last lid/libuser-lid logname members users whoami who w
WireGuard VPNAlpine CentOS 8 Debian 10 Firewall Ubuntu 20.04
2 comments… add one
  • WebtrafficJunkie Dec 16, 2005 @ 2:13

    This is a great article on firewalls! Thanks for the information!

  • sumsam Feb 2, 2008 @ 19:08

    Howto store and forward on qmail.

Leave a Reply

Your email address will not be published.

Use HTML <pre>...</pre> for code samples. Still have questions? Post it on our forum