General Questions

I have tried everything and I cannot figure out how I can block ICMP to certain internet addresses. I have two m0n0 firewalls running and have tried rules on both the internal and external m0n0wall systems and nothing is blocking ICMP to a certain IP. I was able to do it trivially with IPcop and I assume I have done something incorrectly because the rule system exists so I would like to know the proper way to block outbound ICMP to an external (internet based) IP address?

thanks

Note the placement of the blocking rule in relation to the Default LAN to any rule.

Also, reset the firewall states if you already have open connection to the host you wish to block.

Perfect! Thanks. Everything I had done was good except the whole states thing. All I need to remember is to reset the states after important changes then correct?

Well, resetting the states breaks all open connections. If you (or someone else behind the m0n0wall) have an important upload/download running, then that work will be lost. Other than that, it's harmless and should be done.