01300 allow icmp from any to any icmptypes 8 out
01400 allow icmp from any to any icmptypes 0 in
01500 allow icmp from any to any icmptypes 11 in
01600 allow icmp from 192.168.9.0/24 to 192.168.9.0/24 in via tun0 icmptypes 0
01700 allow icmp from 192.168.9.0/24 to 192.168.9.0/24 out via tun0 icmptypes 0