[plug] iptables questions
billk at iinet.net.au
Wed Sep 29 17:37:37 WST 2010
On Wed, 2010-09-29 at 02:29 -0700, Fred Janon wrote:
> $ ping localhost
> PING localhost (127.0.0.1) 56(84) bytes of data.
> 64 bytes from localhost (127.0.0.1): icmp_seq=1 ttl=64 time=0.028 ms
> 64 bytes from localhost (127.0.0.1): icmp_seq=2 ttl=64 time=0.029 ms
> The server is on an EC2 Amazon server in the US and I am trying to
> traceroute it from here with my ISP and the Amazon firewall in the
> middle, with an ocean in between.
> "You aint got a hope in hell ..."
> ping and traceroute wont work across the Internet - well they might
> but its almost standard practise to block ICMP due to DOS
> EC2 itself is getting a reputation for being used in DOS attacks - the
> VoIP boys are up in arms and were talking about blocking it.
> Use tcptraceroute - uses TCP and port 80 by default, or you can select
> another port such as 22 (ssh) - that should work.
More information about the plug