1*7c478bd9Sstevel@tonic-gate# block all ICMP packets. 2*7c478bd9Sstevel@tonic-gate# 3*7c478bd9Sstevel@tonic-gateblock in proto icmp all 4*7c478bd9Sstevel@tonic-gate# 5*7c478bd9Sstevel@tonic-gate# allow in ICMP echos and echo-replies. 6*7c478bd9Sstevel@tonic-gate# 7*7c478bd9Sstevel@tonic-gatepass in on le1 proto icmp from any to any icmp-type echo 8*7c478bd9Sstevel@tonic-gatepass in on le1 proto icmp from any to any icmp-type echorep 9*7c478bd9Sstevel@tonic-gate# 10*7c478bd9Sstevel@tonic-gate# block all ICMP destination unreachable packets which are port-unreachables 11*7c478bd9Sstevel@tonic-gate# 12*7c478bd9Sstevel@tonic-gateblock in on le1 proto icmp from any to any icmp-type unreach code 3 13