I recommend Firehol on linux.
2013-08 FireWallSophos
drop-vs-reject
Should I block all ICMP at my firewall/router?
...
CategorySecurity