Firewall/NAT

Dear Sir,

I use last version of m0n0wall (2).I define LAN's and WAN's IP address.
I want to block all ICMP packets on all interfaces  (ZONEs).
after configuring firewall rules , at the first use every things is good and work.
but if we disable and enable those rules for a few times , that rule doesn't effect on ICMP packets. and you must restart m0n0wall ( with out change rules ) and then those rules work again .
Please help me about that problem.

Best Regards,
Ali Reza Bahmani.

Changing rules doesn't drop existing states. What you have to be seeing is an existing connection. Clear the state table and you won't see that.