1#	$NetBSD$
2# block all ICMP packets.
3#
4block in proto icmp all
5#
6# allow in ICMP echos and echo-replies.
7#
8pass in on le1 proto icmp from any to any icmp-type echo
9pass in on le1 proto icmp from any to any icmp-type echorep
10#
11# block all ICMP destination unreachable packets which are port-unreachables
12#
13block in on le1 proto icmp from any to any icmp-type unreach code 3
14