vulcannz:

 

fe31nz:

 

That suggests that the 222.153.202.43 device is blocking your specific IP address for some reason.  The rest of us can get through, but you can not.  It would be worthwhile running Wireshark to see if you are receiving any ICMP packets from 222.153.202.* that might tell you why you are being blocked.

 

 

Just because you cannot ping something doesn't mean you cannot get to it. Standard security practice is to turn off ICMP responses for internet facing servers/devices unless there is a specific requirement for it. Note that other peoples tracerts end at the same hop.

 

 

 

 

Tracetcp is not a ping.  It uses a SYN packet just like a normal TCP connection.  You can not block tracetcp without blocking all connections also (unless you only block SYN packets with TTL=1).  That is why it is so useful in situations like this.  Take a closer look at my tracetcp and traceroute.  The traceroute ends, like everyone elses, at 222.153.223.166 (sparkdigital.co.nz), one step before the IRD box.  The tracetcp ends with "8 Destination Reached in 16 ms. Connection established to 222.153.202.43", so it connected to the destination address.  The OP's tracetcp does not do that, so their SYN packets are either being dropped or ignored by the IRD box.

 

Standard security practice does disable some ICMP responses, but not necessarily all.  ICMP packets were invented for good reasons - only some are troublesome to a network.  So in a situation like this, it is worthwhile looking for an ICMP response to see if it will tell you what happened to your SYN packets.  An ICMP type 3 code 9, 10 or 13 saying "administratively prohibited" would be a pretty good indicator.