ICMP and Traceroute

[Deepak Vaidya <dvaidya () clark net>]

Two more questions that came from the same group who need access to dns
outbound.  They would like to be able to ping and traceroute external
hosts from all the clients.

We currently do not allow icmp and traceroute packets in or out bound.  We
block all those at the router level.  The group is responsible for
client network and security design and they would like ping and
traceroute for troubleshooting networks.

Thanks
- Deepak