Firewall/NAT

Hi all

I was wondering how safe is it to permit ICMP (type:all) with the destination of WAN?

Is there any need to permit ICMP in the first place? I've always thought that by default it blocks all ICMP message types, and that this is bad.

Can anyone share their ICMP views?

- I do not worry about it, ICMP isn't even configured.
- I only permit certains types of ICMP to the WAN.
- I permit all ICMP

Thanks!