-A LOG_ICMP -j LOG --log-prefix "[UFW BLOCK BAD-ICMP]: " --log-level err -m limit --limit 3/min --limit-burst 10
-A LOG_ICMP -j DROP
# Too large icmp requests
--A PREROUTING -p icmp --icmp-type echo-request -m length --length 85: -j LOG_ICMP
+-A PREROUTING -p icmp --icmp-type echo-request -m length --length 128: -j LOG_ICMP
# Too many times of icmp requests (only 5 packets per second if over 10pkts/sec)
-A PREROUTING -p icmp --icmp-type echo-request -m limit --limit 5/s --limit-burst 10 -j ACCEPT
-A PREROUTING -p icmp --icmp-type echo-request -j LOG_ICMP