ICMP block via firewall-config