[KLUG Members] webmail saga continues! story at 11...

[Adam Williams]

> If you look at the traceroute printout the last device that you are able
> to get a response from is vlan806.tuk2f-msfc-2b.us.msn.net.  The point
> of interest I find in that DNS name is the msfc-2b portion.  This is a
> daughtercard for the Cisco Catalyst 6500 series/7600 Series supervisor
> card that provides Cisco IOS software and a ASIC that provides routing
> functionality on top of the traditional CatOS.  It is most likely that
> they have applied ICMP filters onto that device which would explain no
> response from devices behind it as well as the traceroute ending at that
> point.  If you would like to know how to apply such filter onto your
> Cisco router please email me and I can send you copies of an ICMP
> blocking ACL as well as what each line means.

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml
covers Cisco firewalling, ACLs, etc...