This is my first question on forums at all. I work as a network support engineer and I have a little issue at work and I would really appreciate advice from you.

Cannot access the url www.reach2.org from customer side (from every other net site is available).

Ping to the site succeeded with the source of the LAN interface.

zare@cet-edgware> ping source                     
PING ( 56 data bytes
64 bytes from icmp_seq=0 ttl=57 time=3.176 ms
64 bytes from icmp_seq=1 ttl=57 time=3.363 ms
64 bytes from icmp_seq=2 ttl=57 time=3.304 ms

Traceroute to the site from source of the LAN of the CPE (juniper) fails.

zare@cet-edgware> traceroute source
traceroute to ( from, 30 hops max, 40 byte packets
 1 (  2.699 ms  3.284 ms  3.734 ms
 2 (  4.163 ms  3.451 ms  3.734 ms
 3 (  3.932 ms  3.841 ms  3.564 ms
 4 (  3.991 ms  3.853 ms  3.913 ms
 5 (  5.343 ms  11.915 ms  5.004 ms
 6 (  7.053 ms  5.392 ms  12.536 ms
 7  * * *
 8  * * *
 9  * * *
10  * * *

Traceroute to every other site failes (except to google).

The only IP address that a traceroute can be obtained is from Google. No other site has been successful.

darkoj@cet-edgware> traceroute source no-resolve
traceroute to ( from, 30 hops max, 40 byte packets
 1  3.081 ms  8.896 ms  3.341 ms
 2  3.179 ms  3.354 ms  2.833 ms
 3  3.777 ms  3.601 ms  3.365 ms
 4  9.562 ms  3.674 ms  3.747 ms
 5  3.756 ms  3.372 ms  3.161 ms
 6  47.197 ms  4.311 ms  10.453 ms
 7  4.202 ms  3.755 ms  5.016 ms
 8  4.376 ms  3.618 ms  3.766 m

I advised them to change the DNS to google's but no help.

I advised them to lower the MTU MSS on the device that sends the request, they advised that they lowered MTU on the server down to 1300 and same again.

I think that it is MTU/MSS issue.

Can you advise why ping succeeds and traceroute fails?

If you need any additional info please ask.

Any advice will be helpful and appreciated.

  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could post and accept your own answer.
    – Ron Maupin
    Jan 6, 2021 at 0:11

3 Answers 3


Ping uses ICMP, but traceroute doesn't necessarily use ICMP so different results are not necessarily unexpected. Some OSes use ICMP and some use something else like UDP.

The traceroute seems to stop in the 185.52.26.xxx network on its way to the next network. Who owns that network, the ISP? It would be beneficial to have the owner of that network see what is happening since that is where the traceroute is failing. The network to which you are trying to trace could be blocking the traceroute, too.

Both ping and traceroute use small packets, so the odds of an MTU problem are fairly small.

Notice that the trace to Google goes a completely different route. There is some sort of routing problem.


For what it's worth, I can't ping or trace to the website, but I can load it in my browser. That has everything to do with my router configuration.


I was able to ping and traceroute to your destination ( I tried the default UDP traceroute, and it failed. Some routers along the path are perhaps filtering ICMP/UDP messages.

The ICMP traceroute works: traceroute -I I suspect that either network or network is configured to filter ICMP/UDP packets, and that's the reason traceroute was initially failing. (FYI - the immediate next hop after is - this tells me there is some configuration problem in either of those networks)


A ping/traceroute is a good test to run, but may not provide uselful results (as with your case here). I do see that the last IP address before the trace drops ( and the IP of the web server ( belong to the same organization (Paragon Internet Group), But your successful pings prove that there isn't a routing issue anywhere in transit.

Try a higher level test as ping/traceroutes don't equate to trying to pull up a web page. Run telnet 80 or telnet 443 to see if traffic can reach your destination IP and port.

Given that other users are able to reach this site, and your other networks are able to reach this site, I would look closer on the CPE side for anything that may be blocking web traffic to this address.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.