So firehol, even with server icmp accept, client icmp accept on an interface, is blocking ICMP_REDIRECT. WHY? WHY? Shoddy firehol. #fb