Question: why blocking icmp is bad?
Answer: Blocking ICMP Traffic for Security Ping sweep — A type of attack that uses ICMP echo request messages to enumerate live hosts on a network. ... Forged ICMP redirects — Network traffic could be fraudulently redirected to an attacker via a forged ICMP redirect message.