| # block all ICMP packets. | |
| # | |
| block in proto icmp all | |
| # | |
| # allow in ICMP echos and echo-replies. | |
| # | |
| pass in on le1 proto icmp from any to any icmp-type echo | |
| pass in on le1 proto icmp from any to any icmp-type echorep | |
| # | |
| # block all ICMP destination unreachable packets which are port-unreachables | |
| # | |
| block in on le1 proto icmp from any to any icmp-type unreach code 3 |