When I try to traceroute to a remote ip, I get
send: Operation not permitted
When I stop iptables, traceroute works fine. So, I assume I need some ip rule for send. What would that rule be?
I did find a solution here http://forums.fedoraforum.org/showthread.php?t=112516, and I add it to my iptables, restart it, but then after a while CSF seems to block send again. Something overwrites that rule.
Found the solution: