@domi @wolf480pl @lanodan One of the big consulting firms used to have (maybe still has) a rule auditing tool which screams when it sees "Allow ICMP Port:Any" in cloud configs, where the port field means ICMP message type.
It's completely fine with listing all of the RFC defined values individually because it's just for show.