Hi Everybody. I don't know if this is the best forum for this, but I'll give it a try. I use Outpost firewall and have several options for ICMP. In searching around the net, I have found it very difficult to get very consise information about the safety of allowing some ICMP. My question is, is it safe to allow echo request type 8 out, echo reply type 0 in, and time exceeded type 11 in? Also there seems to be some differences of opinion about destination unreachable type 3, in and out. I was allowing type three in but noticed I had a lot of blocked type 3 out, so I put my isp DNS server in the trusted zone, and now the type 3 is going in and out to my ISP only. Seems to work, and I can pass all the scan tests. Sorry if I was confusing. Any thoughts would be appreciated.