Hide Vyos router on traceroute

, , ,
1

Hello.
How can I hide the vyos router from the trace? If I block just icmp type-name time-exceeded
But then all tracing to the end hop is lost. And I need to make sure that only the router’s hop is not visible.

2

Block icmp-type time-exceeded for the OUTPUT chain but allow it anywhere else.

3

Can you elaborate on that? Maybe you have an example?

4

Can you please give an example?

5

I tried doing this setup, but it hides all the trace after the router

set firewall name HIDE-TRACEROUTE rule 10 action drop
set firewall name HIDE-TRACEROUTE rule 10 protocol icmp
set firewall name HIDE-TRACEROUTE rule 10 icmp type time-exceeded
set interfaces ethernet eth0 firewall in name HIDE-TRACEROUTE