Fix up ICMP rules for all ICMP.

Fixes issue #39 by adding another type of ipset (for ICMP data), and tightens up firewalling around protocol types.