Traceroute not working from LAN to any Internet destination



  • Hi,
    I have noticed a strange issue while tracing to Internet destinations from LAN side.
    The output of entire traceroute gets NAT to destination IP . i.e I see only destination IP as all the Intermediate HOPS.

    From WAN interface traceroute works perfectly.

    To verify issue I did packet capture on WAN and LAN interface. Packet Capture clearly shows that WAN is receiving TTL expired from Intermediate HOPS correctly however when it reaches LAN, all the Intermediate HOPs are displayed as just destination IP. This clearly indicates Pfsense is behaving strange. I did multiple tests with ICMP and UDP traceroutes with same results.

    Has anyone faced the issue before? Please guide.

    LAN trace:

    1 * * *
    2 172.217.4.46 8.648 ms 8.025 ms 7.959 ms
    3 172.217.4.46 15.970 ms 14.904 ms 15.991 ms
    4 172.217.4.46 16.988 ms 16.015 ms 17.667 ms
    5 172.217.4.46 16.461 ms 17.790 ms 15.640 ms
    6 172.217.4.46 16.335 ms 18.012 ms 25.032 ms
    7 172.217.4.46 15.972 ms 17.992 ms 22.967 ms
    8 172.217.4.46 42.378 ms 16.748 ms 28.899 ms
    9 172.217.4.46 15.952 ms 17.988 ms 25.003 ms
    10 172.217.4.46 34.956 ms 43.148 ms 71.013 ms
    11 172.217.4.46 40.850 ms 42.575 ms 43.427 ms
    12 172.217.4.46 28.976 ms 27.943 ms 26.994 ms

    WAN trace:

    1 * * *
    2 69.63.242.41 12.863 ms 12.001 ms 12.658 ms
    3 209.148.231.93 16.187 ms 16.024 ms 16.083 ms
    4 209.148.229.229 14.858 ms 16.601 ms 12.398 ms
    5 209.148.235.22 16.547 ms 17.388 ms
    209.148.230.10 14.972 ms
    6 72.14.222.87 14.132 ms 16.429 ms
    72.14.216.54 16.421 ms
    7 108.170.250.231 16.549 ms
    108.170.250.242 15.450 ms
    108.170.250.227 16.954 ms
    8 216.239.42.158 17.973 ms
    216.239.49.82 39.996 ms 47.720 ms
    9 108.170.250.231 15.238 ms
    74.125.244.147 18.021 ms
    108.170.250.227 16.969 ms
    10 108.170.243.174 28.023 ms
    172.253.64.254 26.948 ms 28.039 ms
    11 72.14.239.115 40.012 ms
    72.14.239.123 40.990 ms 40.178 ms
    12 172.217.9.78 27.896 ms 26.768 ms 29.040 ms

    Both above traceroutes are taken from Pfsense


Log in to reply