Add icmp protocol support

[nickayoung]

Hello,
It would be great to be able to configure icmp using this formula.

Could do something like:

firewall:
enabled: True
  icmp:
    ips_allow: 10.0.0.0/8
    type:
       - echo-request
       - echo-reply

Thoughts?

[TiepiNL]

It has been more than a year without a single reply to the OP. If a configurable solution like proposed by @nickayoung with ip filter and different icmp types isn't possible yet, perhaps someone could already add a simple 'allow_icmp_in' boolean, triggering some basic icmp states like:

iptables-allow-all-icmp-in:
iptables.append:
- table: filter
- chain: INPUT
- jump: ACCEPT
- match:
- comment
- comment: "Allow inbound PING"
- proto: icmp
- save: True

iptables-allow-all-icmp-in-ipv6:
iptables.append:
- table: filter
- chain: INPUT
- jump: ACCEPT
- match:
- comment
- comment: "Allow inbound PING"
- proto: icmpv6
- family: ipv6
- save: True