|
Well it just depends on your security policies. ICMP will imply that a system exists (although can be spoofed by honeypots etc.) Personally I don't like permitting ICMP in general. If you have no business connecting to a web service on a given machine, what right would you have to know if that machine can be pinged?
|