there are expert modes where you can apply the

name source destination protocol time comments. rank state action track

for more stabilized dedicated connections

I am certain there are more depending on the vender

-Henry

Sean Donelan <sean@donelan.com> wrote:

You could drop ICMP packets at your firewall if the firewalls properly
implemented stateful inspection of ICMP packets. The problem is few
firewalls include ICMP responses in their statefull analysis. So you are
left with two bad choices, permit "all" ICMP packets or deny "all" ICMP
packets.