Does anyone have some good links for modern best practices? Internally we have some disagreement about whether we should allow or block ICMP and traceroute (well, UDP, since the ICMP policy would ...