    /sbin/iptables --new-chain InboundICMP
    /sbin/iptables --new-chain InboundICMP_1
    /sbin/iptables --append INPUT --protocol icmp --jump InboundICMP
    /sbin/iptables --append InboundICMP --protocol icmp --jump InboundICMP_1
    # Catch any returns, just in case
    /sbin/iptables --append INPUT --protocol icmp --jump denylog
    /sbin/iptables --append InboundICMP --protocol icmp --jump denylog
