1 block in proto icmp from any to any icmp-type echo 2 pass in proto icmp from any to any icmp-type echo 3 block in proto icmp from any to any icmp-type unreach code 3 4 pass in proto icmp from any to any icmp-type unreach code 3 5 block in proto icmp from any to any icmp-type echorep 6 pass in proto icmp from any to any icmp-type echorep 7 pass in proto icmp all icmp-type maskreq keep state 8 pass in proto icmp all icmp-type timest keep state 9 pass in proto icmp all icmp-type inforeq keep state 10