can't run TRACERT

I am on a Windows 2003 domain with all XP workstations (SP2 & 3's).

My two DNS servers are just basically forwarded to my ISP's DNS.

I am unable to run TRACERT on any workstation or on the DNS server. It will
time out on any address.

I can run other utilities fine such as NETSTAT, NSLOOKUP and PING.

Any ideas where to troubleshoot?

"Jeff" <> wrote in message news:A9FCA62D-FFF6-44AF-AA45-...
>I am on a Windows 2003 domain with all XP workstations (SP2 & 3's).
>
> My two DNS servers are just basically forwarded to my ISP's DNS.
>
> I am unable to run TRACERT on any workstation or on the DNS server. It will
> time out on any address.
>
> I can run other utilities fine such as NETSTAT, NSLOOKUP and PING.
>
> Any ideas where to troubleshoot?
>
>


If you are trying to tracert to an external entity, it sounds like you have a firewall block. Ping uses ICMP echo-reply, however, tracert needs additional factors allowed, such as:

access-list allow_ping permit icmp any any echo-reply
access-list allow_ping permit icmp any any source-quench
access-list allow_ping permit icmp any any unreachable
access-list allow_ping permit icmp any any time-exceeded

Nslookup and netstat have nothing to do with tracert.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.