Block a port, but without blacklisting remote IP if used ?

[simon templar]

Hi all,

I see that my csf blocks a lot of IP that are just trying to ping my server.
I understand that a lot of people ping before they attack.. but a lot ping just to check the latency.

Is it possible to block ICMP/8 in csf, but NOT block an IP address who is trying to ping ? (Basically, the server will not answer anything, but will not block the IP neither).

Thank you.

[simon templar]

I think I found it

PS_PORTS=0:65535,ICMP

Can someone confirm that I can remove ICMP from this line and that it will simply block ICMP traffic from my box, but also will not blacklist someone who's trying to ping ?

Thanks