Just allow all ICMP. What could go wrong?