https://www.packet-radio.net/allowing-traceroutes-to-succeed-with-iptables/