Alarig Le Lay <alarig at swordarmor.fr> writes: > So, my advise is simply to not filter ICMP and ICMPv6. And by the way, > why do want to filter ICMP? You will not be DDoSed with pings. I tend to agree. But if you still want to do it, then there is some advice in https://tools.ietf.org/html/rfc4890 Bjørn