${IPTABLES} -N icmp_allowed
${IPTABLES} -A icmp_allowed -p icmp --icmp-type 0 -j ACCEPT
${IPTABLES} -A icmp_allowed -p icmp --icmp-type 3 -j ACCEPT
${IPTABLES} -A icmp_allowed -p icmp --icmp-type 4 -j ACCEPT
${IPTABLES} -A icmp_allowed -p icmp --icmp-type 8 -m limit --limit 4/min -j ACCEPT
${IPTABLES} -A icmp_allowed -p icmp --icmp-type 11 -j ACCEPT
#${IPTABLES} -A icmp_allowed -p icmp -j LOG --log-level 7 --log-prefix 'FW_ICMP '
${IPTABLES} -A icmp_allowed -p icmp -j DROP