allow ICMP4/6-ping