@wolf480pl @domi I should look against at ICMP stuff but I've yet to block any, like the only thing I've seen you can do with it is NAT punching, but I don't consider NAT a security mechanism (after all most of my rules are written for both IPv4 and IPv6) so I don't really care.