Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When I try to traceroute to a remote ip, I get send: Operation not permitted When I stop iptables, traceroute works fine. So, I assume I need some ip rule for send. What would that rule be?

I did find a solution here, and I add it to my iptables, restart it, but then after a while CSF seems to block send again. Something overwrites that rule.

share|improve this question
up vote 14 down vote accepted

Found the solution:

Do you have CSF installed? If yes, open the config page for CSF and search the page for traceroute. There you'll see this message:

# Allow outgoing UDP ports

# To allow outgoing traceroute add 33434:33523 to this list

share|improve this answer
Thank you very much! adding CSF ports to outgoing traceroute solve this issue. – user294390 Jun 16 '15 at 2:16

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.