[moonfern]

With iptables you can read packets, is it an icmp packet, what is it length and so on... If I was a hacker and I notice that icmp packets are blocked, I would feel less fear.

[kkirsche]

I agree with this sentiment. To me, blocking ICMP solves a symptom of the security problem, not the actual problem