#
# block all ICMP packets.
#
block proto icmp from any to any mask any