I have a fairly restrictive ipfw setup on a FBSD 8.2-STABLE machine. Pings were not getting through so I added this near the top of the rule set: ##### # Allow icmp ##### ${FWCMD} add allow icmp from any to any It does work but, two questions: 1) Is there a better way? 2) Will this cause harm or otherwise expose the server to some vulnerability?