Author: Leon Dang
Date: 16-08-01 15:01
Thanks Dan for answering this for me.
It's a mechanism to tell automated worm scripts to butt-out and stop scanning those ports, since *they don't exist* to the internet.
As for your ICMP problems, if you state exactly what errors you're getting, then it'll help a lot. Also, the guys on freebsd usenet are very helpful if you don't get an answer here straight away. My only conclusion is that you might have copied and pasted the rules incorrectly...