traceroute send failed: Operation not permitted

[powereds]

hi all,

good day.
when i try to run the command "traceroute www.yahoo.com" from root terminal, i got this error:

[root@bordeaux ~]# traceroute 66.94.230.49
traceroute to 66.94.230.49 (66.94.230.49), 30 hops max, 40 byte packets
send failed: Operation not permitted
send failed: Operation not permitted
send failed: Operation not permitted
send failed: Operation not permitted
 1  58.69.234.18 (58.69.234.18)  0.000 ms   0.000 ms   0.000 ms
[root@bordeaux ~]#

this linux box is now directly facing the internet with iptables-netfilter running.
when i put it inside the private network, i can successfully traceroute.

any idea how to make traceroute run successfully?
thanks in advance.

[powereds]

when i stop the firewall,

root@bordeaux ~]# service iptables stop
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: filter mangle             [  OK  ]
Unloading iptables modules:                                [  OK  ]
[root@bordeaux ~]#

and run "traceroute www.yahoo.com", it run sucessfully.

[root@bordeaux ~]# traceroute www.yahoo.com
traceroute to www.yahoo.com (66.94.230.39), 30 hops max, 40 byte packets
 1  58.69.234.xxx (58.69.234.xxx)  0.740 ms   0.620 ms   0.631 ms
 2  58.69.150.xxx (58.69.150.xxx)  44.196 ms   44.285 ms   45.433 ms
 3  58.69.255.xxx (58.69.255.xxx)  48.348 ms   44.455 ms   47.136 ms
 4  210.5.64.253 (210.5.64.253)  208.577 ms   205.648 ms   199.667 ms
 5  210.14.0.38 (210.14.0.38)  56.920 ms   55.423 ms   58.564 ms
 6  58.71.0.143 (58.71.0.143)  58.889 ms   55.597 ms   56.331 ms
 7  if-10-0.core1.LXE-LosAngeles.teleglobe.net (216.6.90.21)  295.065 ms   295.792 ms   295.774 ms
 8  if-8-0.core2.LXE-LosAngeles.Teleglobe.net (64.86.80.14)  386.636 ms   383.203 ms   375.098 ms
 9  if-1-2.mcore4.LAA-LosAngeles.teleglobe.net (216.6.85.9)  358.017 ms   409.153 ms   411.139 ms
10  if-5-0.mcore4.PDI-PaloAlto.teleglobe.net (216.6.86.9)  302.493 ms   300.077 ms   303.858 ms
11  if-3-0.core2.PDI-PaloAlto.teleglobe.net (216.6.86.18)  264.473 ms   263.423 ms   263.158 ms
12  ix-1-0.core2.PDI-PaloAlto.Teleglobe.net (64.86.84.146)  303.120 ms   299.342 ms   301.500 ms
13  ge-3-0-0-p250.msr2.scd.yahoo.com (216.115.106.181)  263.727 ms   267.255 ms   263.401 ms
14  ten-2-3-bas2.scd.yahoo.com (66.218.82.223)  426.890 ms   423.939 ms   422.370 ms
15  p8.www.scd.yahoo.com (66.94.230.39)  261.917 ms   301.883 ms   264.929 ms
[root@bordeaux ~]#

its the iptables thats preventing traceroute.

thanks.

[tebbens]

Check iptables....

# iptables -v -L
# cat /etc/sysconfig/iptables

You should have an ICMP entry. This is mine...
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT

Mabuhay !!