I would like to filter as much icmp traffic as I can. I use IP-filtering (I do not need masquerading). Should I allow forwarding of icmp packets between local and outside networks? For which ports? May i limit icmp traffic to packets directed to (or originated from) one of the firewall interface only? Do You think this is advisable? Please suggest documentation on this topic; I am a bit confused at the moment. thank you marco