I recently tried Phantom's ruleset (version 6) which is awsome!! I passed all the tests at PCflank but at GRC I failed the test (all service ports). All my ports were stealthed but my system answered to ICMP ping (echo reply). I checked the ruleset and there is a rule in place that is supposed to block all ICMP. I am behing a router, but am in the DMZ. So I was wondering why my system has answered the ping. Is it because I am still behing the router? The ping was answered using other firewalls too (Outpost, Kerio).