From the article: "This drops all ICMP packets. ICMP is only used to ping a host to find out if it’s still alive."
Please stop this non-sense, there are too many ICMP blackholes already.
Please stop this non-sense, there are too many ICMP blackholes already.
don't be lazy, don't drop ICMP and just do proper filtering.