[kkirsche]

I agree with this sentiment. To me, blocking ICMP solves a symptom of the security problem, not the actual problem